PATENT APPLICATION 
IN THE UNITED STATES PATENT AND TRADEMARK OFFICE 

Applicant(s): Denis Proulx, et al. 

Title: METHOD AND SYSTEM FOR IP LINK MANAGEMENT 

App. No.: 10/027,821 Filed: 12-19-2001 

Examiner: Ke, Peng Group Art Unit: 2174 

Atty. Docket No.: 1400.1374890 

Mail Stop Appeal Brief - Patents 
Commissioner for Patents 
PO Box 1450 

Alexandria, VA 22313-1450 

APPEAL BRIEF 

Dear Sir: 

In response to the Notice of Appeal filed September 18, 2009, Appellant submits the 
following: 




STATEMENT OF REAL PARTY IN INTEREST 

As presently advised, Alcatel-Lucent Canada Inc. is the real party in interest in this appeal 

by virtue of an executed Assignment of the entire interest from the named Inventor(s), Denis 
Proulx, Chuong Ngoc Ngo, Attaullah Zabihi, David Wing-Chung Chan and Felix Katz, to Alcatel 
Canada Inc., recorded in the United States Patent and Trademark Office on 05-09-2002 at Reel 
012876, Frame 0474, followed by a Certificate of Amalgamation from Alcatel Canada Inc. to 
Alcatel-Lucent Canada Inc. dated January 1 , 2007. Appellant encloses copies of the above- 
referenced Assignment and Certificate of Amalgamation. wjMIII SDENb0B3 mmm mmil 

M PC: i 452 549. 89 OP 
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STATEMENT OF RELATED CASES 

As presently advised, there are no other prior or pending appeals, interferences, or judicial 

proceedings known to Appellant, the Appellant's legal representative, or Assignee which may be 
related to, directly affect, or be directly affected by, or have a bearing on the Board's decision in 
the pending appeal. 



JURISDICTIONAL STATEMENT 

This appeal is taken under 35 U.S.C. § 134. A final Office action rejecting claims 1-18 has 

a mail date of March 1 8, 2009. A notice of appeal and a petition for extension of time were 
received at the United States Patent and Trademark Office on September 24, 2009. This appeal 
brief and a petition for extension of time are being mailed April 26, 2010. 
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37C.F.R. §§ 1.130, 1.131, or 1.132 51 



STATUS OF AMENDMENTS 

Appellant has not amended the specification, drawings, or claims subsequent to final 

rejection. 
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GROUNDS OF REJECTION TO BE REVIEWED 

The grounds of rejection to be reviewed on appeal are as follow: 

Claim Rejections - 35 USC § 102 

Claims 1-4, and 7-18 are rejected under 35 U.S.C. 102(b) as being anticipated by Hansen 
US Patent 5,838,907. 

Claim Rejections - 35 USC § 103 

Claim 5 is rejected under 35 U.S.C. 103(a) as being unpatentable over Hansen in view of 
Hansen US Patent 5,838,907 [sic] in view of Hardwick US Patent 5,550,816. 

Claims 6 is rejected under 35 U.S.C. 103(a) as being unpatentable over Hansen in view of 
Hansen US Patent 5,838,907 [sic] in view of Chui US Patent 2002/0165978. 
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STATEMENT OF FACTS 

F1 . As an example, Appellant submits the cited portions of the cited reference fail to 

disclose "determining local interface and next neighbor information for the network device." 
Office action response 1 1/20/2008, p. 6, 1. 7-9. 

F2. The Examiner cites "(figure 7, items 114, 116, 120, 126, 122, 118, and 124)" of the 
Hansen reference as allegedly disclosing such feature. Office action response 
11/20/2008, p. 6, 1. 9-10. 

F3. Appellant notes Figure 7 of the Hansen reference merely purports to be an 
illustration of a configuration manager GUI, but does not appear to disclose any method 
steps. Office action response 11/20/2008, p. 6, 1. 10-12; Hansen, Fig. 7. 
F4. As another example, Appellant submits the cited portions of the cited reference fail 
to disclose "determining whether the local interface and next neighbor information is 
associated with a logical configuration link stored among a plurality of logical configuration 
links in a logical link database." Office action response 1 1/20/2008, p. 6, 1. 13-15. 
F5. The Examiner cites "(column 5, lines 35-64; Subsystem is a logical link database)." 
Office action response 11/20/2008, p. 6, 1. 16. 

F6. Appellant notes the cited portion of the cited reference states, "The data and 

programming instruction are stored in the memory subsystem 6...." Office action 

response 11/20/2008, p. 6, 1. 16-18; Hansen, col. 5, lines 35-64. 

F7. Appellant sees no teaching as to "determining whether the local interface and next 

neighbor information is associated with a logical configuration link stored among a plurality 
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of logical configuration links in a logical link database." Office action response 11/20/2008, 
p. 6, 1. 18-20. 

F8. As yet another example, Appellant submits the cited portions of the cited reference 

fail to disclose "creating a new logical configuration link when the local interface and next 

neighbor information is not associated with any of the logical configuration links in the 

logical link database." Office action response 1 1/20/2008, p. 6, 1. 21-23. 

F9. The Examiner cites "(column 15, lines 30-50; Unconnected PCI slot are 

unassociated connection). Office action response 1 1/20/2008, p. 6, 1. 24-25. 

F10. Appellant notes col. 15, lines 33-39, state, "As may now be seen, the various 

network entities, as well as unconnected connection interfaces, are graphically displayed 

on the backplane bitmap 220 using information contained in the bitmap section 36 of the 

configuration script 12-N and the local configuration file 20 for the Compaq router 122." 

Office action response 11/20/2008, p. 6, 1. 25-28; Hansen, col. 15, lines 33-39. 

F1 1. The Examiner cited col. 5, lines 49-52, in alleging "Subsystem is a logical link 

database." Office action response 11/20/2008, p. 6, 1. 28-29. 

F12. Appellant submits col. 5, lines 49-52, states "If a particular network device does not 

have a configuration script, a configuration file cannot be constructed by the network 

device configuration tool 10." Office action response 11/20/2008, p. 6, 1. 29, to p. 7, 1. 2; 

Hansen, col. 5, lines 49-52. 
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F1 3. Appellant submits the Examiner's apparent interpretation of the teachings of the 
prior art would appear to render them inoperable. Office action response 1 1/20/2008, p. 7, 
1. 2-3. 

F1 4. As yet another example, Appellant submits the cited portions of the cited reference 
fail to disclose "storing the new logical configuration link in the logical link database." 
Office action response 11/20/2008, p. 7, 1. 5-6. 

F15. The Examiner cites "(column 13, lines 10-30)." Office action response 1 1/20/2008, 
p. 7, 1. 6-7. 

F1 6. Appellant submits col. 1 3, lines 22-26, state, "If either the origination or destination 
device or entity do not have an available slot which is connectable to the other device or 
entity, a determination is made at step 156 that the devices/entities cannot be connected." 
Office action response 11/20/2008, p. 7, 1. 7-9; Hansen, col. 13, lines 22-26. 
F1 7. Appellant submits the cited portion of the cited reference fails to disclose "storing 
the new logical configuration link in the logical link database." Office action response 
11/20/2008, p. 7, 1. 9-11. 

F1 8. As a further example, Appellant submits the cited portions of the cited reference fail 
to disclose "sending the new logical configuration link to the network device." Office action 
response 11/20/2008, p. 7, 1.12-13. 

F19. The Examiner cites "(column 14, lines 41-60)." Office action response 1 1/20/2008, 
p. 7, 1. 13-14. 
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F20. Appellant notes col. 14, lines 48-50, states "...before saving the constructed local 
configuration file 20 to the memory subsystem and associating it with the device." Office 
action response 11/20/2008, p. 7, 1. 14-15; Hansen, col. 14, lines 48-50. 
F21 . Appellant submits the cited portion of the cited reference does not appear to 
disclose "sending the new logical configuration link to the network device." Office action 
response 11/20/2008, p. 7, 1. 16-17. 

F22. Regarding claim 2, Appellant submits the cited portions of the cited reference fail to 

disclose "selecting a link type." Office action response 1 1/20/2008, p. 7, 1. 19-20. 

F23. The Examiner cites "(column 1 3, lines 1 -1 0; x.25, frame relay, PPP and HDLC are 

link types." Office action response 11/20/2008, p. 7, 1. 20-21. 

F24. Appellant submits the Examiner has alleged, with respect to claim 1 , from which 

claim 2 depends, that "Subsystem is a logical link database." Office action response 

1 1/20/2008, p. 7, 1. 21-22; final Office action 3/18/2009, p. 2, 1. 22. 

F25. Appellant submits the Examiner doesn't provide any evidence that "Subsystem" 

includes any information pertaining to "frame relay, PPP and HDLC." Office action 

response 11/20/2008, p. 7, 1. 22-24. 

F26. Appellant submits the Examiner's apparent interpretation of the teachings of the 
prior art would appear to render them inoperable. Office action response 1 1/20/2008, p. 7, 
I. 24-25. 
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F27. Appellant submits the cited portions of the cited reference fail to disclose "selecting 
a link numbering type for the new logical configuration link." Office action response 
11/20/2008, p. 7, 1. 26-27. 

F28. The Examiner alleges "(column 1 1 , lines 1 3-30; PCI slots are numbered 

configuration links)." Office action response 1 1/20/2008, p. 7, 1. 27-28. 

F29. Appellant submits such allegation does not disclose a step of "selecting a link 

numbering type...." Office action response 11/20/2008, p. 7, 1. 28-29. 

F30. As a further example, Appellant submits the cited portions of the cited reference fail 

to disclose "selecting a link application for the new logical configuration link." Office action 

response 11/20/2008, p. 8, 1. 1-2. 

F31 . The Examiner alleges "(column 14, lines 5-25; The script commands are 
applications; column 13, lines 65-column 14, lines 5)." Office action response 11/20/2008, 
p. 8, 1. 2-4; final Office action 3/18/2009, p. 3, 1. 18. 

F32. Appellant notes the Examiner alleged with respect to "creating a new logical 
configuration link..." of claim 1, from which claim 2 depends, "Unconnected PCI slot are 
unassociated connection." Office action response 11/20/2008, p. 8, 1. 4-5; final Office 
action 3/18/2009, p. 3, 1. 3. 

F33. Appellant sees no allegation by the Examiner that "the script commands" disclose 
link applications for "unconnected PCI slot." Office action response 11/20/2008, p. 8, 1. 6- 
7. 



-11 - 



Application No: 10/027,821 

F34. The Examiner appears to allege "unconnected PCI slot" discloses "the new logical 
configuration link." Office action response 11/20/2008, p. 8, 1. 7-8; final Office action 
3/18/2009 p. 3, 1.1-3. 

F35. Appellant submits the Examiner's allegations appear to be inconsistent and would 
render the purported teachings of the cited reference inoperable. Office action response 
11/20/2008, p. 8, 1.8-10. 

F36. As yet another example, Appellant submits the cited portions of the cited reference 
fail to disclose "selecting a sub layer interface type for the new logical configuration link." 
Office action response 11/20/2008, p. 8, 1. 11-12. 

F37. The Examiner cites "(column 1 4, lines 1 5-25; Connection identifiers are 
configuration links)." Office action response 1 1/20/2008, p. 8, 1. 13; final Office action 
3/18/2009, p. 3, 1. 

F38. Appellant notes the Examiner alleged, with respect to "creating a new logical 
configuration link" of claim 1, from which claim 2 depends, "Unconnected PCI slot are 
unassociated connection." Office action response 11/20/2008, p. 8, 1. 13-15; final Office 
action 3/18/2009, p. 3, 1.1-3. 

F39. Appellant submits "connection identifiers are configuration links" is inconsistent with 
the purported teachings alleged by the Examiner with respect to claim 1 , thereby 
apparently rendering such teachings inoperable. Office action response 1 1/20/2008, p. 8, 
1.15-17. 
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F40. Appellant submits "connection identifiers are configuration links" fails to disclose 
"selecting a sub layer interface type...." Office action response 1 1/20/2008, p. 8, 1. 18-19. 
F41 . As yet another example, Appellant submits the cited portions of the cited reference 
fail to disclose "creating a first endpoint for the new logical configuration link" and "creating 
a second endpoint for the new logical configuration link." Office action response 
11/20/2008, p. 8, 1. 20-22. 

F42. The Examiner cites "(column 1 3, lines 1 0-30)." Office action response 1 1/20/2008, 
p. 8, 1. 22; final Office action 3/18/2009, p. 4, 1. 1-2. 

F43. Appellant submits col. 1 3, lines 22-26, states, "If either the origination or destination 
device or entity do not have an available slot which is connectable to the other device or 
entity, a determination is made at step 156 that the devices/entities cannot be connected." 
Office action response 11/20/2008, p. 8, 1. 23-25; Hansen, col. 13, lines 22-26. 
F44. Appellant submits the cited portion of the cited reference fails to disclose "creating 
a first endpoint for the new logical configuration link." Office action response 1 1/20/2008, 
p. 8, 1. 25-26. 

F45. Appellant submits the cited portion of the cited reference fails to disclose "creating 
a second endpoint for the new logical configuration link." Office action response 
11/20/2008, p. 8, 1. 25-27. 

F46. Regarding claim 3, Appellant submits the cited portion of the cited reference fails to 

disclose "selecting the link type from among a group consisting of: point-to-point, point-to- 

IP, and point-to-subnet." Office action response 11/20/2008, p. 8, 1. 29-30. 
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F47. The Examiner cites "(column 1 3, lines 1 -1 0; x.25, frame relay, PPP and HDLC)." 
Office action response 1 1/20/2008, p. 8, 1. 30, to p. 9, 1. 1; final Office action 3/18/2009, p. 
4, 1. 6. 

F48. Appellant notes the inconsistency Appellant alleges with respect to the Examiner's 
allegations regarding "selecting a link type" in claim 2, from which claim 3 depends. Office 
action response 11/20/2008, p. 9, 1. 1-3. 

F49. Appellant submits the Examiner's allegations with respect to claim 3 also render the 

Examiner's apparent interpretation of the purported teachings of the cited portions of the 

cited reference inoperable. Office action response 11/20/2008, p. 9, 1. 3-5. 

F50. Regarding claim 4, Appellant submits the cited portions of the cited reference fail to 

disclose "selecting the link numbering type from a group consisting of: a numbered type 

and an unnumbered type." Office action response 1 1/20/2008, p. 9, 1. 7-9. 

F51 . The Examiner cites "column 1 1 , lines 1 3-30; PCI slots are numbering type, column 

13, lines 28-45; a list of connection interface is un-numbertype)." Office action response 

11/20/2008, p. 9, 1. 9-10; final Office action 3/18/2009, p. 4, 1. 10-11. 

F52. Appellant notes the inconsistency Appellant alleges with respect to the Examiner's 

allegations regarding "selecting a link numbering type..." in claim 2. Office action 

response 11/20/2008, p. 9, 1. 10-12. 

F53. Appellant submits the Examiner's allegations with respect to claim 4 also render the 

Examiner's apparent interpretation of the purported teachings of the cited portions of the 

cited reference inoperable. Office action response 11/20/2008, p. 9, 1. 12-14. 
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F54. Regarding claim 7, Appellant submits the cited portions of the cited reference fail to 
disclose "modifying a logical configuration link in the logical link database." Office action 
response 11/20/2008, p. 9, 1. 16-17. 

F55. The Examiner cites "(column 1 1 , lines 41 -53; Editing is modifying)." Office action 
response 11/20/2008, p. 9, 1. 17-18; final Office action 3/18/2009, p. 4, 1. 13-14. 
F56. The Examiner alleged "Unconnected PCI are unassociated connection" as 
purportedly teaching "creating a new logical configuration link..." in claim 1 . Office action 
response 11/20/2008, p. 9, 1. 18-20; final Office action 3/18/2009, p. 3, 1. 1-3. 
F57. Appellant sees no reference to such "unconnected PCI" in "(column 1 1 , lines 41 -53; 
Editing is modifying)," as alleged by the Examiner. Office action response 1 1/20/2008, p. 
9, 1. 21. 

F58. Regarding claim 8, Appellant submits the cited portions of the cited reference fail to 
disclose "deleting a logical configuration link in the logical link database." Office action 
response 11/20/2008, p. 9, 1. 24-25. 

F59. The Examiner cites "(column 10, lines 1-20)." Office action response 11/20/2008, 

p. 9, 1. 25-26; final Office action 3/18/2009, p. 4, 1. 16. 

F60. Appellant notes the Examiner alleged "Unconnected PCI are unassociated 

connection" as purportedly teaching "creating a new logical configuration link..." in claim 1. 

Office action response 11/20/2008, p. 9, 1. 26-27; final Office action 3/18/2009, p. 3, 1. 1-3. 

F61 . Appellant sees no reference to such "unconnected PCI" in "(column 1 0, lines 1 - 

20)," as alleged by the Examiner. Office action response 1 1/20/2008, p. 9, 1. 28-29. 
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F62. Appellant submits teachings in "(column 1 0, lines 1 -20)" appear to be inconsistent 
with "unconnected PCI." Office action response 11/20/2008, p. 9, 1. 29-30. 
F63. For example, "telnet to this device," "view ip addresses," and "view ipx addresses" 
appear to be inconsistent with "unconnected PCI," as cited by the Examiner with respect to 
claim 1. Office action response 11/20/2008, p. 9, 1. 30, to p. 10, 1. 2; Hansen, column 10, 
lines 1-20. 

F64. Regarding claim 9, Appellant notes the Examiner states "As per claim 9, it is of the 
same scope as claim 1 . Supra." Office action response 1 1/20/2008, p. 10, 1. 5-6; final 
Office action 3/18/2009, p. 4, 1. 17. 

F65. Appellant respectfully disagrees and notes claim 9 is directed to different subject 
matter than claim 1. Office action response 11/20/2008, p. 10, 1. 6-7. 
F66. Regarding claim 1 1 , Appellant submits the cited portions of the cited reference fail 
to disclose "wherein the processing system determines local interface and next neighbor 
information for the network device." Office action response 1 1/20/2008, p. 10, 1. 13-15. 
F67. The Examiner cites "(figure 7, items 114, 116, 120, 126, 122, 118, and 124)." 
Office action response 1 1/20/2008, p. 10, 1. 15; final Office action 3/18/2009, p. 5, 1. 5. 
F68. Appellant submits Figure 7 of the Hansen reference merely purports to be an 
illustration of a configuration manager GUI, but does not appear to disclose "wherein the 
processing system determines local interface and next neighbor information for the 
network device." Office action response 11/20/2008, p. 10, 1. 16-18; Hansen, Fig. 7. 
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F69. Regarding claim 1 2, Appellant submits the cited portions of the cited reference fail 
to disclose "wherein the processing system determines whether the local interface and 
next neighbor information is associated with one of the logical configuration links stored in 
the logical link database." Office action response 11/20/2008, p. 10, 1. 20-22. 
F70. The Examiner cites "(column 1 5, lines 30-50; Unconnected PCI slot are 
unassociated connection)." Office action response 11/20/2008, p. 10, 1. 22-23; final Office 
action 3/18/2009, p. 5, 1. 8-9.- 

F71 . Appellant submits the "Unconnected PCI slot are unassociated connection" alleged 
by the Examiner fails to disclose, for example, "next neighbor information" and "the logical 
link database." Office action response 11/20/2008, p. 10, 1. 24-25. 
F72. Regarding claim 1 3, Appellant submits the cited portions of the cited reference fail 
to disclose "wherein the processing system creates a new logical configuration link when 
the local interface and next neighbor information is not associated with any of the logical 
configuration links stored in the logical link database." Office action response 1 1/20/2008, 
p. 11,1. 1-4. 

F73. The Examiner cites "(column 1 3, lines 1 0-30)." Office action response 1 1/20/2008, 
p. 11, 1. 4; final Office action 3/18/2009, p. 4, 1. 13. 

F74. Appellant submits col. 1 3, lines 22-26, state, "If either the origination or destination 

device or entity do not have an available slot which is connectable to the other device or 

entity, a determination is made at step 156 that the devices/entities cannot be connected." 

Office action response 1 1/20/2008, p. 1 1 , 1. 4-7. 

- 17- 



Application No: 10/027,821 

F75. Appellant submits the cited portion of the cited reference fails to disclose "wherein 
the processing system creates a new logical configuration link when the local interface and 
next neighbor information is not associated with any of the logical configuration links 
stored in the logical link database." Office action response 1 1/20/2008, p. 11,1. 7-10. 
F76. Regarding claim 14, Appellant submits the cited portions of the cited reference fail 
to disclose "wherein the processing system causes the new logical configuration link to be 
stored in the logical link database." Office action response 1 1/20/2008, p. 11, 1. 12-14. 
F77. The Examiner cites "(column 1 3, lines 1 0-30)." Office action response 1 1/20/2008, 
p. 1 1, 1. 14; final Office action 3/18/2009, p. 5, 1. 16. 

F78. Appellant submits col. 1 3, lines 22-26, state, "If either the origination or destination 

device or entity do not have an available slot which is connectable to the other device or 

entity, a determination is made at step 156 that the devices/entities cannot be connected." 

Office action response 11/20/2008, p. 11, 1. 14-17; Hansen, col. 13, lines 22-26. 

F79. Appellant submits the cited portion of the cited reference fails to disclose "wherein 

the processing system causes the new logical configuration link to be stored in the logical 

link database." Office action response 11/20/2008, p. 11, 1. 17-19. 

F80. Regarding claim 1 6, Appellant submits the cited portions of the cited reference fail 

to disclose "wherein the processing system causes the new logical configuration link to be 

sent to the network device." Office action response 1 1/20/2008, p. 1 1 , 1. 23-25. 

F81 . The Examiner cites "(column 14, lines 41-60)." Office action response 1 1/20/2008, 

p. 1 1 , 1. 25; final Office action 3/1 8/2009, p. 5, 1. 21 . 
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F82. Appellant notes col. 14, lines 48-50, states "...before saving the constructed local 

configuration file 20 to the memory subsystem and associating it with the device." Office 

action response 11/20/2008, p. 11, 1. 25-27; Hansen, col. 14, lines 48-50. 

F83. Appellant submits the cited portion of the cited reference does not appear to 

disclose "wherein the processing system causes the new logical configuration link to be 

sent to the network device." Office action response 1 1/20/2008, p. 1 1 , 1. 27-29. 

F84. Regarding claim 1 7, Appellant submits the cited portions of the cited reference fail 

to disclose "wherein creating the new logical configuration link when the local interface and 

next neighbor information is not associated with any of the logical configuration links in the 

logical link database occurs based on interfaces information entered by a user." Office 

action response 11/20/2008, p. 12, 1. 1-4. 

F85. The Examiner states "As per claim 17, it is rejected under the same rationale as 
claim 1. Supra." Office action response 11/20/2008, p. 12, 1. 4-5; final Office action 
3/18/2009, p. 6,1.1. 

F86. Appellant notes claim 1 7 is directed to different subject matter than claim 1 . Office 
action response 11/20/2008, p. 12, 1. 5-6. 

F87. Regarding claim 1 8, Appellant submits the cited portions of the cited reference fail 
to disclose the subject matter recited in claim 18. Office action response 1 1/20/2008, p. 
12, 1.10-11. 
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F88. Appellant notes the Examiner states "As per claim 1 8, it is rejected under the same 
rationale as claim 2." Office action response 11/20/2008, p. 12, 1. 11-12; final Office action 
3/18/2009, p. 6, 1. 2. 

F89. Appellant notes claim 1 8 is directed to different subject matter than claim 2. Office 
action response 11/20/2008, p. 12, 1. 12-13. 

F90. Nonetheless, Appellant submits the Examiner has not alleged anticipation with 
respect to subject matter recited in claim 18. Office action response 1 1/20/2008, p. 12, 1. 
16-17. 

F91 . As one example, Appellant submits claim 1 8 recites "populating form panels with 

the link type, the link numbering type, the link application, and the sub layer interface 

type." Office action response 11/20/2008, p. 12, 1. 17-18. 

F92. Claim 2 does not. Office action response 1 1/20/2008, p. 1 2, 1 8-1 9. 

F93. As another example, Appellant submits claim 1 8 recites "receiving user input of 

interfaces information." Office action response 11/20/2008, p. 12, 1. 19-20. 

F94. As yet another example, Appellant submits claim 1 8 recites "validating the 

interfaces information." Office action response 11/20/2008, p. 12, 1. 20-21. 

F95. As a further example, Appellant submits claim 18 recites "creating a link in 

accordance with the interfaces information." Office action response 11/20/2008, p. 12, 1. 

21-22. 

F96. As another example, Appellant submits claim 18 recites "provisioning the link." 

Office action response 11/20/2008, p. 12, 1. 22-23. 
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F97. Appellant submits the Examiner has not alleged any teaching as to such subject 
matter. Office action response 1 1/20/2008, p. 12, 1. 23-24. 
F98. As an example, Appellant submits the cited portions of the cited reference fail to 
disclose or suggest "selecting the link application from a group consisting of: Internet 
Protocol Forwarding, Multi-Protocol Label Switching and Internet Protocol Forwarding, and 
Multi-Protocol Label Switching." Office action response 11/20/2008, p. 13, 1. 2-5. 
F99. Appellant notes the Examiner alleges, with respect to claim 2, "The script 
commands are applications." Office action response 11/20/2008, p. 13, 1. 5-6; final Office 
action 3/18/2009, p. 3, 1.18. 

F100. The Examiner alleges "Hardwick teaches the step of selecting a link application 
from a group consisting of: Internet Protocol Forwarding, Multi-Protocol Label Switching 
and Internet Protocol Forwarding, and Multi-Protocol Label Switching (column 43, lines 60- 
column 44, lines 5)." Office action response 11/20/2008, p. 13, 1. 6-9; final Office action 
3/18/2009, p. 6, 1.17-19. 

F101 . Appellant submits the Examiner's allegations as to purported teachings of the cited 

references with respect to the subject matter of claims 2 and 5 are inconsistent and 

contradictory, thereby rendering the supposed combination of the purported teachings 

inoperable. Office action response 11/20/2008, p. 13, 1. 9-12. 

F102. Appellant submits the Examiner's alleged motivation to combine the references 

does not appear to pertain to the supposed combination of the purported teachings. Office 

action response 11/20/2008, p. 13, 1. 12-14. 
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F103. As an example, Appellant submits the cited portions of the cited reference fail to 
disclose or suggest "selecting the sub layer interface type from a group consisting of: 
Packet Over Sonet, Asynchronous Transfer Mode, and GigEthernet." Office action 
response 11/20/2008, p. 13, 1. 21-23. 

F104. Appellant notes the Examiner alleges, with respect to claim 2, from which claim 6 
depends, "Connection identifiers are configuration links." Office action response 
11/20/2008, p. 13, 1. 23-25; final Office action 3/18/2009, p. 3, 1. 20. 
F105. The Examiner alleges "Chui teaches selecting a sub layer interface type comprises 
the step of: Selecting the sub-layer interface type from a group consisting of: Packet over 
Sonet, Asynchronous Transfer Mode, and GigEthernet." Office action response 
11/20/2008, p. 13, 1. 25-27; final Office action, p. 7, 1. 7-9. 

F106. Appellant submits the Examiner's allegations as to purported teachings of the cited 
references with respect to the subject matter of claims 2 and 6 are inconsistent and 
contradictory, thereby rendering the supposed combination of the purported teachings 
inoperable. Office action response 11/20/2008, p. 13, 1. 27-30. 
F107. Appellant submits the Examiner's alleged motivation to combine the references 
does not appear to pertain to the supposed combination of the purported teachings. Office 
action response 11/20/2008, p. 13, 1. 30, to p. 14, 1. 2. 
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ARGUMENT 

Rejection of Claims 1-4 and 7-18 under 35 U.S.C. 102(b) as being anticipated by 

Hansen US Patent 5,838,907 

Appellant submits there exist clear errors in the Examiner's rejections and/or the 
Examiner's omissions of one or more essential elements needed for a prima facie rejection. 
Appellant submits the Examiner's "Response to Arguments" provides evidence that the Examiner 
has failed to consider the pending claims as required by the Manual of Patent Examining 
Procedure (MPEP) and prevailing case law. For anticipation under 35 U.S.C. § 102, a reference 
must teach every aspect of the claimed invention either explicitly or implicitly. Any feature not 
directly taught must be inherently present [emphasis added]. Appellant submits MPEP § 2131 
provides: "A claim is anticipated only if each and every element as set forth in the claim is found, 
either expressly or inherently described in a single prior art reference. Verdegaal Bros. v. Union 
Oil Co. of California, 814 F.2d 628, 631 (Fed. Cir. 1987). The identical invention must be shown 
in as complete detail as contained in. the... claim.' Richardson v. Suzuki Motor Co., 868 F.2d 
1226, 1236 (Fed. Cir. 1989). The elements must be arranged as required by the claim." MPEP § 
2141 sets forth the Graham inquiries for a rejection under 35 U.S.C. § 103. As Appellant 
describes in detail below, Appellant submits there exist clear errors in the Examiner's rejections 
and/or the Examiner's omissions of one or more aspects of a prima facie rejection. 

Regarding claim 1 , Appellant submits the cited portions of the cited reference fail to 

disclose the subject matter of claim 1 . As an example, Appellant submits the cited portions of the 

cited reference fail to disclose "determining local interface and next neighbor information for the 
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network device." F1 The Examiner cites "(figure 7, items 114, 116, 120, 126, 122, 118, and 
124)" of the Hansen reference as allegedly disclosing such feature. F2 However, Appellant 
notes Figure 7 of the Hansen reference merely purports to be an illustration of a configuration 
manager GUI, but does not appear to disclose any method steps. F3 

As another example, Appellant submits the cited portions of the cited reference fail to 
disclose "determining whether the local interface and next neighbor information is associated with 
a logical configuration link stored among a plurality of logical configuration links in a logical link 
database." F4 While the Examiner cites "(column 5, lines 35-64; Subsystem is a logical link 
database)," F5 Appellant notes the cited portion of the cited reference states, "The data and 
programming instruction are stored in the memory subsystem 6...." F6 Appellant sees no 
teaching as to "determining whether the local interface and next neighbor information is 
associated with a logical configuration link stored among a plurality of logical configuration links in 
a logical link database." F7 

As yet another example, Appellant submits the cited portions of the cited reference fail to 

disclose "creating a new logical configuration link when the local interface and next neighbor 

information is not associated with any of the logical configuration links in the logical link 

database." F8 While the Examiner cites "(column 15, lines 30-50; Unconnected PCI slot are 

unassociated connection), F9 Appellant notes col. 15, lines 33-39, state, "As may now be seen, 

the various network entities, as well as unconnected connection interfaces, are graphically 

displayed on the backplane bitmap 220 using information contained in the bitmap section 36 of 

the configuration script 12-N and the local configuration file 20 for the Compaq router 122." F10 
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However, Appellant notes col. 5, lines 49-52, as the Examiner cited in alleging "Subsystem is a 
logical link database," F1 1 states "If a particular network device does not have a configuration 
script, a configuration file cannot be constructed by the network device configuration tool 10." 
F12 Accordingly, Appellant submits the Examiner's apparent interpretation of the teachings of the 
prior art would appear to render them inoperable. F13 Thus, Appellant submits the cited portions 
of the cited reference cannot disclose the subject matter recited in claim 1 . 

As yet another example, Appellant submits the cited portions of the cited reference fail to 
disclose "storing the new logical configuration link in the logical link database." F14 While the 
Examiner cites "(column 13, lines 10-30)," F1 5 Appellant submits col. 13, lines 22-26, state, "If 
either the origination or destination device or entity do not have an available slot which is 
connectable to the other device or entity, a determination is made at step 156 that the 
devices/entities cannot be connected." F16 Appellant submits the cited portion of the cited 
reference fails to disclose "storing the new logical configuration link in the logical link database." 
F17 

As a further example, Appellant submits the cited portions of the cited reference fail to 
disclose "sending the new logical configuration link to the network device." F18 While the 
Examiner cites "(column 14, lines 41-60)," F19 Appellant notes col. 14, lines 48-50, states 
"...before saving the constructed local configuration file 20 to the memory subsystem and 
associating it with the device." F20 Appellant submits the cited portion of the cited reference 
does not appear to disclose "sending the new logical configuration link to the network device." 
F21 
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Regarding claim 2, Appellant submits the cited portions of the cited reference fail to 
disclose "selecting a link type." F22 While the Examiner cites "(column 13, lines 1-10; x.25, 
frame relay, PPP and HDLC are link types," F23 Appellant submits the Examiner has alleged, 
with respect to claim 1 , from which claim 2 depends, that "Subsystem is a logical link database." 
F24 Appellant submits the Examiner doesn't provide any evidence that "Subsystem" includes any 
information pertaining to "frame relay, PPP and HDLC." F25 Thus, Appellant submits the 
Examiner's apparent interpretation of the teachings of the prior art would appear to render them 
inoperable. F26 

As another example, Appellant submits the cited portions of the cited reference fail to 
disclose "selecting a link numbering type for the new logical configuration link." F27 While the 
Examiner alleges "(column 11, lines 13-30; PCI slots are numbered configuration links)," F28 
Appellant submits such allegation does not disclose a step of "selecting a link numbering type...." 
F29 

As a further example, Appellant submits the cited portions of the cited reference fail to 

disclose "selecting a link application for the new logical configuration link." F30 While the 

Examiner alleges "(column 14, lines 5-25; The script commands are applications; column 13, 

lines 65-column 14, lines 5)," F31 Appellant notes the Examiner alleged with respect to "creating 

a new logical configuration link..." of claim 1, from which claim 2 depends, "Unconnected PCI slot 

are unassociated connection." F32 While the Examiner alleges "The script commands are 

applications," F31 Appellant sees no allegation by the Examiner that "the script commands" 

disclose link applications for "unconnected PCI slot," F33 which the Examiner appears to allege 
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disclose "the new logical configuration link." F34 Thus, Appellant submits the Examiner's 
allegations appear to be inconsistent and would render the purported teachings of the cited 
reference inoperable. F35 

As yet another example, Appellant submits the cited portions of the cited reference fail to 
disclose "selecting a sub layer interface type for the new logical configuration link." F36 While 
the Examiner cites "(column 14, lines 15-25; Connection identifiers are configuration links)," F37 
Appellant notes the Examiner alleged, with respect to "creating a new logical configuration link" of 
claim 1, from which claim 2 depends, "Unconnected PCI slot are unassociated connection." F38 
Thus, Appellant submits "connection identifiers are configuration links" is inconsistent with the 
purported teachings alleged by the Examiner with respect to claim 1 , thereby apparently 
rendering such teachings inoperable. F39 Moreover, Appellant submits "connection identifiers 
are configuration links" fails to disclose "selecting a sub layer interface type...." F40 

As yet another example, Appellant submits the cited portions of the cited reference fail to 
disclose "creating a first endpoint for the new logical configuration link" and "creating a second 
endpoint for the new logical configuration link." F41 While the Examiner cites "(column 13, lines 
10-30)," F42 Appellant submits col. 13, lines 22-26, states, "If either the origination or destination 
device or entity do not have an available slot which is connectable to the other device or entity, a 
determination is made at step 156 that the devices/entities cannot be connected." F43 Appellant 
submits the cited portion of the cited reference fails to disclose "creating a first endpoint for the 
new logical configuration link" F44and "creating a second endpoint for the new logical 
configuration link." F45 
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Regarding claim 3, Appellant submits the cited portion of the cited reference fails to 
disclose "selecting the link type from among a group consisting of: point-to-point, point-to-IP, and 
point-to-subnet." F46 While the Examiner cites "(column 13, lines 1-10; x.25, frame relay, PPP 
and HDLC)," F47 Appellant notes the inconsistency Appellant alleges with respect to the 
Examiner's allegations regarding "selecting a link type" in claim 2, from which claim 3 depends. 
F48 Thus, Appellant submits the Examiner's allegations with respect to claim 3 also render the 
Examiner's apparent interpretation of the purported teachings of the cited portions of the cited 
reference inoperable. F49 

Regarding claim 4, Appellant submits the cited portions of the cited reference fail to 
disclose "selecting the link numbering type from a group consisting of: a numbered type and an 
unnumbered type." F50 While the Examiner cites "column 1 1 , lines 1 3-30; PCI slots are 
numbering type, column 13, lines 28-45; a list of connection interface is un-numbertype)," F51 
Appellant notes the inconsistency Appellant alleges with respect to the Examiner's allegations 
regarding "selecting a link numbering type..." in claim 2, from which claim 4 depends. F52 Thus, 
Appellant submits the Examiner's allegations with respect to claim 4 also render the Examiner's 
apparent interpretation of the purported teachings of the cited portions of the cited reference 
inoperable. F53 

Regarding claim 7, Appellant submits the cited portions of the cited reference fail to 

disclose "modifying a logical configuration link in the logical link database." F54 While the 

Examiner cites "(column 1 1 , lines 41-53; Editing is modifying)," F55 Appellant notes the Examiner 

alleged "Unconnected PCI are unassociated connection" as purportedly teaching "creating a new 
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logical configuration link..." in claim 1, from which claim 7 depends. F56 Appellant sees no 
reference to such "unconnected PCI" in "(column 11, lines 41-53; Editing is modifying)," as 
alleged by the Examiner. F57 Thus, Appellant submits the cited portions of the cited reference 
fail to disclose the subject matter of claim 7. 

Regarding claim 8, Appellant submits the cited portions of the cited reference fail to 
disclose "deleting a logical configuration link in the logical link database." F58 While the 
Examiner cites "(column 10, lines 1-20)," F59 Appellant notes the Examiner alleged 
"Unconnected PCI are unassociated connection" as purportedly teaching "creating a new logical 
configuration link..." in claim 1, from which claim 8 depends. F60 Appellant sees no reference to 
such "unconnected PCI" in "(column 10, lines 1-20)," as alleged by the Examiner. F61 Moreover, 
Appellant submits teachings in "(column 10, lines 1-20)" appear to be inconsistent with 
"unconnected PCI." F62 For example, "telnet to this device," "view ip addresses," and "view ipx 
addresses" appear to be inconsistent with "unconnected PCI," as cited by the Examiner with 
respect to claim 1 , from which claim 8 depends. F63 Thus, Appellant submits the cited portions 
of the cited reference fail to disclose the subject matter of claim 8. 

Regarding claim 9, Appellant notes the Examiner states "As per claim 9, it is of the same 
scope as claim 1 . Supra." F64 Appellant respectfully disagrees and notes claim 9 is directed to 
different subject matter than claim 1 . F65 However, to the extent the Examiner relies on the 
Examiner's rejection of claim 1 to also reject claim 9, Appellant reiterates what Appellant alleges 
to be the deficiencies of the Examiner's rejection of claim 1 , as Appellant discussed above. 
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Regarding claim 1 1 , Appellant submits the cited portions of the cited reference fail to 
disclose "wherein the processing system determines local interface and next neighbor information 
for the network device." F66 While the Examiner cites "(figure 7, items 1 1 4, 1 1 6, 1 20, 1 26, 1 22, 
118, and 124)," F67 Appellant submits Figure 7 of the Hansen reference merely purports to be an 
illustration of a configuration manager GUI, but does not appear to disclose "wherein the 
processing system determines local interface and next neighbor information for the network 
device." F68 

Regarding claim 12, Appellant submits the cited portions of the cited reference fail to 
disclose "wherein the processing system determines whether the local interface and next 
neighbor information is associated with one of the logical configuration links stored in the logical 
link database." F69 While the Examiner cites "(column 15, lines 30-50; Unconnected PCI slot 
are unassociated connection)," F70 Appellant submits the "Unconnected PCI slot are 
unassociated connection" alleged by the Examiner fails to disclose, for example, "next neighbor 
information" and "the logical link database." F71 Thus, Appellant submits the Examiner has not 
made a prima facie showing of anticipation with respect to the subject matter of claim 12. 

Regarding claim 13, Appellant submits the cited portions of the cited reference fail to 

disclose "wherein the processing system creates a new logical configuration link when the local 

interface and next neighbor information is not associated with any of the logical configuration links 

stored in the logical link database." F72 While the Examiner cites "(column 13, lines 10-30)," F73 

Appellant submits col. 13, lines 22-26, state, "If either the origination or destination device or 

entity do not have an available slot which is connectable to the other device or entity, a 
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determination is made at step 156 that the devices/entities cannot be connected." F74 Appellant 
submits the cited portion of the cited reference fails to disclose "wherein the processing system 
creates a new logical configuration link when the local interface and next neighbor information is 
not associated with any of the logical configuration links stored in the logical link database." F75 

Regarding claim 14, Appellant submits the cited portions of the cited reference fail to 
disclose "wherein the processing system causes the new logical configuration link to be stored in 
the logical link database." F76 While the Examiner cites "(column 13, lines 10-30)," F77 
Appellant submits col. 13, lines 22-26, state, "If either the origination or destination device or 
entity do not have an available slot which is connectable to the other device or entity, a 
determination is made at step 156 that the devices/entities cannot be connected." F78 Appellant 
submits the cited portion of the cited reference fails to disclose "wherein the processing system 
causes the new logical configuration link to be stored in the logical link database." F79 

Regarding claim 16, Appellant submits the cited portions of the cited reference fail to 
disclose "wherein the processing system causes the new logical configuration link to be sent to 
the network device." F80 While the Examiner cites "(column 14, lines 41-60)," F81 Appellant 
notes col. 14, lines 48-50, states "...before saving the constructed local configuration file 20 to the 
memory subsystem and associating it with the device." F82 Appellant submits the cited portion 
of the cited reference does not appear to disclose "wherein the processing system causes the 
new logical configuration link to be sent to the network device." F83 

Regarding claim 17, Appellant submits the cited portions of the cited reference fail to 

disclose "wherein creating the new logical configuration link when the local interface and next 
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neighbor information is not associated with any of the logical configuration links in the logical link 

database occurs based on interfaces information entered by a user." F84 The Examiner states 

"As per claim 17, it is rejected under the same rationale as claim 1. Supra." F85 Appellant 

respectfully disagrees and notes claim 17 is directed to different subject matter than claim 1. F86 

However, to the extent the Examiner relies on the Examiner's rejection of claim 1 to also reject 

claim 17, Appellant reiterates what Appellant alleges to be the deficiencies of the Examiner's 

rejection of claim 1 , as Appellant discussed above. 

Regarding claim 18, Appellant submits the cited portions of the cited reference fail to 

disclose the subject matter recited in claim 18. F87 Appellant notes the Examiner states "As per 

claim 18, it is rejected under the same rationale as claim 2." F88 Appellant respectfully 

disagrees and notes claim 18 is directed to different subject matter than claim 2. F89 To the 

extent the Examiner relies on the Examiner's rejection of claim 2 to also reject claim 1 8, Appellant 

reiterates what Appellant alleges to be the deficiencies of the Examiner's rejection of claim 2, as 

Appellant discussed above. Nonetheless, Appellant submits the Examiner has not alleged 

anticipation with respect to subject matter recited in claim 18. F90 As one example, Appellant 

submits claim 18 recites "populating form panels with the link type, the link numbering type, the 

link application, and the sub layer interface type," F91 while claim 2 does not. F92 As another 

example, Appellant submits claim 18 recites "receiving user input of interfaces information." F93 

As yet another example, Appellant submits claim 18 recites "validating the interfaces information." 

F94 As a further example, Appellant submits claim 18 recites "creating a link in accordance with 

the interfaces information." F95 As another example, Appellant submits claim 18 recites 
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"provisioning the link." F96 Appellant submits the Examiner has not alleged any teaching as to 
such subject matter. F97 Thus, Appellant submits the Examiner has not made a prima facie 
showing of anticipation with respect to claim 18. 

Rejection of Claim 5 under 35 U.S.C. 103(a) as being unpatentable over Hansen in view of 
Hansen US Patent 5,838,907 [sic] in view ofHardwick US Patent 5,550,816 

MPEP § 2143 describes examples of basic requirements of a prima facie case of 
obviousness under 35 U.S.C. § 103. As Appellant describes in detail below, Appellant submits 
there exist clear errors in the Examiner's rejections and/or the Examiner's omissions of one or 
more aspects of a prima facie rejection. 

Regarding claim 5, Appellant submits the cited portions of the cited reference fail to render 

unpatentable the subject matter of claim 5. As an example, Appellant submits the cited portions 

of the cited reference fail to disclose or suggest "selecting the link application from a group 

consisting of: Internet Protocol Forwarding, Multi-Protocol Label Switching and Internet Protocol 

Forwarding, and Multi-Protocol Label Switching." F98 Appellant notes the Examiner alleges, with 

respect to claim 2, from which claim 5 depends, "The script commands are applications." F99 

However, the Examiner now alleges "Hardwick teaches the step of selecting a link application 

from a group consisting of: Internet Protocol Forwarding, Multi-Protocol Label Switching and 

Internet Protocol Forwarding, and Multi-Protocol Label Switching (column 43, lines 60-column 44, 

lines 5)." F100 Appellant submits the Examiner's allegations as to purported teachings of the 

cited references with respect to the subject matter of claims 2 and 5 are inconsistent and 

contradictory, thereby rendering the supposed combination of the purported teachings inoperable. 
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F101 Moreover, Appellant submits the Examiner's alleged motivation to combine the references 
does not appear to pertain to the supposed combination of the purported teachings. F102 Thus, 
Appellant submits the Examiner has not made a prima facie showing of obviousness with respect 
to the subject matter of claim 5. 

Rejection of claim 6 under 35 U.S.C. 103(a) as being unpatentable over Hansen in view of 
Hansen US Patent 5,838,907 [sic] in view of Chui US Patent 2002/0165978 

MPEP § 2143 describes examples of basic requirements of a prima facie case of 
obviousness under 35 U.S.C. § 103. Appellant submits there exist clear errors in the Examiner's 
rejections and/or the Examiner's omissions of one or more aspects of a prima facie rejection. 

Regarding claim 6, Appellant submits the cited portions of the cited reference fail to render 

unpatentable the subject matter of claim 6. As an example, Appellant submits the cited portions 

of the cited reference fail to disclose or suggest "selecting the sub layer interface type from a 

group consisting of: Packet Over Sonet, Asynchronous Transfer Mode, and GigEthernet." F103 

Appellant notes the Examiner alleges, with respect to claim 2, from which claim 6 depends, 

"Connection identifiers are configuration links." F104 However, the Examiner now alleges "Chui 

teaches selecting a sub layer interface type comprises the step of: Selecting the sub-layer 

interface type from a group consisting of: Packet over Sonet, Asynchronous Transfer Mode, and 

GigEthernet." F105 Appellant submits the Examiner's allegations as to purported teachings of 

the cited references with respect to the subject matter of claims 2 and 6 are inconsistent and 

contradictory, thereby rendering the supposed combination of the purported teachings inoperable. 

F106 Moreover, Appellant submits the Examiner's alleged motivation to combine the references 
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does not appear to pertain to the supposed combination of the purported teachings. F107 Thus, 
Appellant submits the Examiner has -not made a prima facie showing of obviousness with respect 
to the subject matter of claim 6. 
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APPENDIX 
CLAIMS SECTION 

1 . (Original) A network administration method for provisioning logical configuration links 
for at least two network devices through a dedicated graphical user interface form, the method 
comprising: 

selecting a network device having at least one network interface through the dedicated 
graphical user interface form; 

determining local interface and next neighbor information for the network device; 

determining whether the local interface and next neighbor information is associated with a 
logical configuration link stored among a plurality of logical configuration links in a logical link 
database; 

creating a new logical configuration link when the local interface and next neighbor 
information is not associated with any of the logical configuration links in the logical link database; 
storing the new logical configuration link in the logical link database; 
validating the new logical configuration link; 
sending the new logical configuration link to the network device; and 
displaying a graphical representation of the new logical configuration link on a display 

device. 

2. (Original) The method of claim 1 , wherein the step of creating a new logical 
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configuration link further comprises the steps of: 
selecting a link type; 

selecting a link numbering type for the new logical configuration link; 
selecting a link application for the new logical configuration link; 
selecting a sub layer interface type for the new logical configuration link; 
creating a first endpoint for the new logical configuration link; and 
creating a second endpoint for the new logical configuration link. 

3. (Original) The method of claim 2, wherein the step of selecting the link type further 
comprises the step of: 

selecting the link type from among a group consisting of: point-to-point, point-to-IP, and 
point-to-subnet. 

4. (Original) The method of claim 2, wherein the step of selecting a link numbering type 
further comprises the step of: 

selecting the link numbering type from a group consisting of: a numbered type and an 
unnumbered type. 

5. (Original) The method of claim 2, wherein the step of selecting a link application 
further comprises the step of: 

selecting the link application from a group consisting of: Internet Protocol Forwarding, 
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Multi-Protocol Label Switching and Internet Protocol Forwarding, and Multi-Protocol Label 
Switching. 

6. (Original) The method of claim 2, wherein the step of selecting a sub layer interface 
type further comprises the step of: 

selecting the sub layer interface type from a group consisting of: Packet Over Sonet, 
Asynchronous Transfer Mode, and GigEthernet. 

7. (Original) The method of claim 1 , further comprising the step of: 
modifying a logical configuration link in the logical link database. 

8. (Original) The method of claim 1 , further comprising the step of: 
deleting a logical configuration link in the logical link database. 

9. (Original) Apparatus for provisioning logical configuration links comprising: 
a logical link database for storing logical configuration links; 

a processing system coupled to the logical link database for accessing the logical link 
database; and 

a display device coupled to the processing system for displaying a graphical user interface 
form comprising a graphical representation of a logical configuration link. 
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1 0. (Original) The apparatus of claim 9 wherein the display device provides an ability to 
select a network device having at least one network interface through the graphical user interface 
form. 

1 1 . (Original) The apparatus of claim 9 wherein the processing system determines local 
interface and next neighbor information for the network device. 

1 2. (Original) The apparatus of claim 1 1 wherein the processing system determines 
whether the local interface and next neighbor information is associated with one of the logical 
configuration links stored in the logical link database. 

1 3. (Original) The apparatus of claim 1 2 wherein the processing system creates a new 
logical configuration link when the local interface and next neighbor information is not associated 
with any of the logical configuration links stored in the logical link database. 

1 4. (Original) The apparatus of claim 1 3 wherein the processing system causes the new 
logical configuration link to be stored in the logical link database. 

1 5. (Original) The apparatus of claim 1 4 wherein the processing system validates the new 
logical configuration link. 
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1 6. (Original) The apparatus of claim 1 5 wherein the processing system causes the new 
logical configuration link to be sent to the network device. 

1 7. (Previously Presented) The method of claim 1 wherein creating the new logical 
configuration link when the local interface and next neighbor information is not associated with 
any of the logical configuration links in the logical link database occurs based on interfaces 
information entered by a user. 

18. (Previously Presented) A method comprising: 
selecting a link type; 

selecting a link numbering type; 
selecting a link application; 
selecting a sub layer interface type; 
creating a first endpoint; 
creating a second endpoint; 

populating form panels with the link type, the link numbering type, the link application, and 
the sub layer interface type; 

receiving user input of interfaces information; 

validating the interfaces information; 

creating a link in accordance with the interfaces information; and 

provisioning the link. 
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CLAIM SUPPORT AND DRAWING ANALYSIS SECTION 

1 . (Original) A network administration method for provisioning logical configuration links 
for at least two network devices through a dedicated graphical user interface form {Page 31, line 
20, through page 32, line 13; Fig. 5}, the method comprising: 

selecting a network device having at least one network interface through the dedicated 
graphical user interface form {Page 31, line 23, through page 32, line 1; Fig. 5, step 501}; 

determining local interface and next neighbor information for the network device {Page 32, 
lines 1 and 2; Fig. 5, step 502}; 

determining whether the local interface and next neighbor information is associated with a 
logical configuration link stored among a plurality of logical configuration links in a logical link 
database {Page 32, lines 2 through 5; Fig. 5, step 503}; 

creating a new logical configuration link when the local interface and next neighbor 
information is not associated with any of the logical configuration links in the logical link database 
{Page 32, lines 6 and 7; Fig. 5, step 504}; 

storing the new logical configuration link in the logical link database {Page 32, lines 7 and 
8; Fig. 5, step 505}; 

validating the new logical configuration link {Page 32, lines 8 and 9; Fig. 5, step 506}; 
sending the new logical configuration link to the network device {Page 32, lines 9 and 10; 
Fig. 5, step 507}; and 

displaying a graphical representation of the new logical configuration link on a display 
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device {Page 32, lines 10 and 11; Fig. 5, step 508}. 

2. (Original) The method of claim 1 , wherein the step of creating a new logical 
configuration link further comprises {Page 32, lines 14 through 16; Fig. 6} the steps of: 

selecting a link type {Page 32, lines 16 and 17; Fig. 6, step 601}; 

selecting a link numbering type for the new logical configuration link {Page 32, lines 18 
and 19; Fig. 6, step 603}; 

selecting a link application for the new logical configuration link {Page 32, lines 21 and 
22; Fig. 6, step 605}; 

selecting a sub layer interface" type for the new logical configuration link {Page 32, lines 
24 and 25; Fig. 6, step 607}; 

creating a first endpoint for the new logical configuration link {Page 33, line 1; Fig. 6, step 
609}; and 

creating a second endpoint for the new logical configuration link {Page 33, line 2; Fig. 6, 
step 610}. 

3. (Original) The method of claim 2, wherein the step of selecting the link type further 
comprises {Page 32, line 17} the step of: 

selecting the link type from among a group consisting of: point-to-point, point-to-IP, and 
point-to-subnet {Page 32, lines 17 and 18; Fig. 6, step 602}. 
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4. (Original) The method of claim 2, wherein the step of selecting a link numbering type 
further comprises {Page 32, lines 19 and 20} the step of: 

selecting the link numbering type from a group consisting of: a numbered type and an 
unnumbered type {Page 32, lines 20 and 21; Fig. 6, step 604}. 

5. (Original) The method of claim 2, wherein the step of selecting a link application 
further comprises {Page 32, line 22} the step of: 

selecting the link application from a group consisting of: Internet Protocol Forwarding, 
Multi-Protocol Label Switching and Internet Protocol Forwarding, and Multi-Protocol Label 
Switching {Page 32, lines 22 through 24; Fig. 6, step 606}. 

6. (Original) The method of claim 2, wherein the step of selecting a sub layer interface 
type further comprises {Page 32, line 25} the step of: 

selecting the sub layer interface type from a group consisting of: Packet Over Sonet, 
Asynchronous Transfer Mode, and GigEthernet {Page 32, line 25, through page 33, line 1 ; Fig. 

6, step 608}. 

7. (Original) The method of claim 1 , further comprising the step of: 

modifying a logical configuration link in the logical link database {Page 32, line 12; Fig. 5, 
step 509}, 
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8. (Original) The method of claim 1 , further comprising the step of: 

deleting a logical configuration link in the logical link database {Page 32, lines 12 and 13; 
Fig. 5, step 510}. 

9. (Original) Apparatus for provisioning logical configuration links {Page 33, line 3, 
through Page 35, line 5; Fig. 7} comprising: 

a logical link database for storing logical configuration links {Page 33, line 13; Fig. 7, 
logical link database 705}; 

a processing system coupled to the logical link database for accessing the logical link 
database {Page 33, lines 6, 7, 13, and 14; Fig. 7, processing system 704}; and 

a display device coupled to the processing system for displaying a graphical user interface 
form comprising a graphical representation of a logical configuration link {Page 33, lines 4-6, 14, 
and 15; Fig. 7, display device 701}. 

1 0. (Original) The apparatus of claim 9 wherein the display device provides an ability to 
select a network device having at least one network interface through the graphical user interface 
form {Page 33, lines 14 and 15}. 

1 1 . (Original) The apparatus of claim 9 wherein the processing system determines local 
interface and next neighbor information for the network device {Page 33, lines 16 and 17}. 
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1 2. (Original) The apparatus of claim 1 1 wherein the processing system determines 
whether the local interface and next neighbor information is associated with one of the logical 
configuration links stored in the logical link database {Page 33, lines 18 and 19}. 

1 3. (Original) The apparatus of claim 1 2 wherein the processing system creates a new 
logical configuration link when the local interface and next neighbor information is not associated 
with any of the logical configuration links stored in the logical link database {Page 33, lines 20 
through 22}. 

1 4. (Original) The apparatus of claim 1 3 wherein the processing system causes the new 
logical configuration link to be stored in the logical link database {Page 33, lines 23 and 24}. 

1 5. (Original) The apparatus of claim 1 4 wherein the processing system validates the new 
logical configuration link {Page 33, line 24}. 

1 6. (Original) The apparatus of claim 1 5 wherein the processing system causes the new 
logical configuration link to be sent to the network device {Page 33, lines 25 and 26}. 

1 7. (Previously Presented) The method of claim 1 wherein creating the new logical 

configuration link when the local interface and next neighbor information is not associated with 

any of the logical configuration links in the logical link database occurs based on interfaces 
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information entered by a user {Page 12, line 2, through page 31, line 19; Figs. 3A-3C and 4}. 

18. (Previously Presented) A method comprising: 

selecting a link type {Page 13, lines 15, through page 14, line 23; Fig. 3A, step 303}; 

selecting a link numbering type {Page 14, lines 24, through page 17, Table 2; Fig. 3A, 
step 313}; 

selecting a link application {Page 17, lines 2 through 8; Fig. 3A, step 319}; 
selecting a sub layer interface type {Page 17, line 9, through page 19, line 11; Fig. 3A, 
step 327}; 

creating a first endpoint {Page 19, line 12, through page 21, line 8; Fig. 3B, step 339}; 
creating a second endpoint {Page 21, line 9, through page 22, line 10; Fig. 3B, step 

347}; 

populating form panels with the link type, the link numbering type, the link application, and 
the sub layer interface type {Page 22, lines 11 through 16; Fig. 3C, step 355}; 

receiving user input of interfaces information {Page 22, lines 17, through page 23, line 9; 
Fig. 3C, step 359}; 

validating the interfaces information {Page 23, line 10, through page 24, Table 5; Fig. 
3C, step 366}; 

creating a link in accordance with the interfaces information {Page 23, line 10, through 

page 24, line 13; Fig. 3C, step 366}; and 

provisioning the link {Page 24, lines 2 through 13; Fig. 3C, step 370}. 
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METHOD AND SYSTEM FOR IP LINK MANAGEMENT 



FIELD OF THE DISCLOSURE 



The present invention relates to the field of data communications networks, and more 
particularly to a method for network management for end-to-end IP link management between 
network devices via a dedicated graphical user interface. 



A data communications network transmits data among and between network devices 
(often referred to as nodes) which are physically and logically connected to the network. The 
physical configuration of a network changes when network devices are added to or removed 
from the network, and when physical connections between devices are made or changed. The 
logical configuration of a network changes as logical connections are established between 
communicating network devices utilizing the physical structure of the network. Network devices 
include devices that can send and/or receive data, as well as devices that can forward data. 
Network devices that can forward data are important in all but the very simplest networks. In 
most networks, direct connections do not exist between most network devices. Instead, each 
network device is connected to a limited number of adjacent network devices. For network 
devices to be able to communicate when they are not physically connected, the two 
communicating network devices rely on intermediate network devices to forward 
communications between them. 

Data transmitted over data communications networks are generally referred to as packets 
or frames. Both of these terms relate to the same subject - data to be transmitted. A string of 
data is fragmented into packets at the sending network device and sent over the network to the 
receiving network device. The receiving network device assembles the individual packets in the 
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correct order to reconstruct the original data string. The particular manner in which packet 
fragmentation and transmission occurs from one network layer to another is defined by the 
various data communication protocols. One prominent data communication protocol is 
Transmission Control Protocol, or TCP, and another is Internet Protocol, usually referred to 
5 simply as IP, or IP protoco l. Other examples of data communication protocols are Multi- 
Protocol Label Switching, or MPLS, Border Gateway Protocol, or BGP, and User Datagram 
Protocol, or UDP. 



Data communications networks can be conceptualized as comprising a hierarchy of 

communications layers that establish different types of connections between network devices. 
10 The Open Systems Interconnect (OSI) Reference Model developed by the International 
t± Standards Organization (ISO) is generally used to describe the structure and function of data 
P communications protocols. A layer does not define a single protocol, but rather a data 
fU communications function that may be carried out by any number of protocols. Thus, each layer 
f| may contain various protocols, each offering a service appropriate to the function of that layer. 

The more basic functions are provided at the lower layers, while successively more sophisticated 
* functions are provided at successively higher layers. In the OSI model, each lower layer in the 
jy model provides data communications capabilities or functions that are utilized by the next higher 
*t layer. A schematic illustration of the OSI seven-layer model is shown in Figure Z As seen in 
f 3 Figure 2, the seven layers in the OSI model, beginning from the bottom, are physical layer 205, 
20 data link layer 210, network layer 2 15, transport layer 220, session layer 225, presentation layer 

230, and application layer 235. In the OSI model, the IP protocol is commonly considered as 

being associated with the third layer, network layer 215. 



In an IP network, each sending and receiving device is assigned a 32-bit address. The 
address is usually written as a series of four "octets" (e.g., numbers within a range of 0-255) 
25 separated by periods. Examples of IP addresses are 127.0.0.1 , 205.160.34. 1 12, 23.1 .99.244, etc. 
Each IP packet sent over an IP network includes the sender's IP address and the recipient's IP 
address. The recipient's IP address is used to route the packet from the sending network device 



2 



1400.1374890 



10 

M 
C3 

a 

m 
ru 

s 

ru 

£3 



20 



via intermediate network devices that have IP forwarding capabilities to the recipient network 
device. 

An example of a simple network that illustrates IP forwarding and logical links is shown 
in Figure 1. The network of Figure 1 includes two types of network devices: non-IP-forwarding 
devices 105, 110, 115 and 120 (represented by rectangles and which may, for example, comprise 
personal computers or computer workstations), and IP-forwarding devices 125, 130, 135, 140, 
145 and 150 (represented by circles and which may, for example, comprise IP routers). The 
network devices in Figure 1 are Interconnected by a various bi-directional connections or links 
160, 162, 164, 166, 168, 170, 172, 174, 176, 178 and 180, represented in Figure 1 by two-headed 



Links 160-180 may comprise direct physical connections between the adjacent network 
devices, or may comprise logical connections that involve intermediate devices, but are "seen" 
by the connected devices as direct connections. For example, network device 1 10 is connected to 
network device 130 via link 166. That is, network device 110 knows that if it sends a 
communication via its interface port connected to link 166, the communication will be received 
by network device 130. It doesn't matter to network device 1 10 whether link 166 is a single, 
physical connection, or a series of physical connections. Logical links such as links 160-180 that 
connect two network devices are sometimes referred to as "IP links." The term "IP links" as used 
herein includes logical links that use the IP protocol, as well as logical links utilizing other 
protocols, e.g., MPLS. 

In the network portrayed in Figure 1 , network device 1 10 is connected directly (via link 
166) only to network device 130. For network device 1 10 to communicate to any other network 
device, the IP forwarding capabilities of network device 1 30 must be used. In addition to 
network device 1 10, to which it is connected via link 1 66, network device 1 30 has direct 
connections to three other network devices 125, 135, and 145, via respective links 160, 168, and 
176. Typically, each of links 160, 166, 168 and 176 are connected to separate ports on network 



3 




1400.1374890 



device 1 30. Each port may be a separate physical interface, or two or more ports may share j 
single, physical interface. Each port may have its own unique assigned IP address, in which 
network device 130, as well of each of its ports, may have distinct IP addresses. 



Network device 130 of Figure 1 has been defined to have IP forwarding capabilities. IP 
5 forwarding capabilities means that network device 1 30 must be able to receive an IP packet 
(intended for delivery to a network device other than network device 1 30) from one of the IP 
links to which it is connected, and forward the IP packet along at least one of the other IP links to 
which it is connected. In the general case where network device 130 is a typical router, network 
device 1 30 is able to receive and forward IP packets from and to any of the IP links 1 60, 1 66, 
10 168 and 176 to which it is connected, provided, of course, that the links are functional, 
ta Similarly, the other network devices 125, 135, 140, 145, and 150 with IP forwarding capabilities 

Q are able to receive and forward IP packets from and to any of the IP links to which they are 

C3 

fU connected. 

N 

R Should network device 1 10 wish to communication with, for example, network device 

p 115, there are various paths that the communication could take. The most direct path comprises 
f U links 166, 176, and 178. However, other paths include the path comprising links 166, 168, 174, 
v2 180 and 178, or even the path comprising links 166, 160, 162, 174, 180 and 178. When network 
device 1 10 sends out IP packets to network device 1 15, it does not know which path the packets 
will take. Network device 1 10 simply addresses the packets to network device 1 1 5 using 
20 network device 1 1 5's IP number (129.1 1 1.1 10.9 in the example of Figurel), and sends the 
packets out over link 166 toward network device 130. What network device 130 does with the 
packets after receipt depends upon the configuration of network device 130. For example, 
network device 1 30 may be configured to forward any packet received from link 166 along link 
176. Alternately, network device 130 may be configured to forward packets along links 
25 depending on the destination IP number of the packet. Network device 130 may also be 
programmed to monitor traffic along each link and to adapt its forwarding scheme to traffic 
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conditions. The manner in which a network device forwards packets depends on the capabilities 
and configuration of the particular network device. 

Thus, even from the simple network illustrated in Figurel, it is apparent that network 
devices that perform IP forwarding should be properly configured for maximum interoperability 
5 to ensure that packets are efficiently routed to their intended destination. The configuration of 
network devices within a network is one aspect of network management. Network devices may 
be locally managed or remotely (centrally) managed. Local management of a network device 
may be accomplished using a workstation or terminal directly connected to the network device. 
Remote management of a network device may be accomplished from remote terminals or 
10 workstations that communicate with the network device via the network, if the network device 

utilizes a protocol that permits remote management One protocol used for remote management 
P of network devices is Simple Network Management Protocol (SNMP), which provides a set of 
fU commands and parameters that allow communication with and configuration of network devices. 

m 
m 

M Personnel responsible for management of a network are commonly referred to as network 

9 

yi$ managers. Network management software systems provide tools for network managers to 
[U facilitate central management of network devices, particularly when the network devices are 
«3 widely dispersed geographically or quite numerous. To manage a network device, a network 
1* manager must know that the network device exists, how it is connected to the network and to 

other network devices, and what the capabilities of the network device are. In addition to the 
20 network device utilizing a protocol that permits remote management, the network management 

system used by the network manager must be capable of communication with the network device 

using the correct protocol. 

The configuration of large networks changes frequently due to addition, removal and/or 
replacement of network devices. To effectively manage large networks such that IP packets are 
25 routed correctly over the network, the network manager must know when data forwarding 

network devices are added or removed. One system used to discover network devices with data 

5 
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forwarding capabilities is described in U.S. Patent Application No. , titled "Method and 

Apparatus for Automatic Discovery of Network Devices with Data Forwarding Capabilities 0 
assigned to the assignee of the present invention and incorporated by reference herein. 

Small networks, i.e., those in which the entire network encompasses a handful of network 
devices in a localized environment, are relatively easy for a network manager to physically 
inspect or determine when a network device is added or removed. In large, geographically 
dispersed networks with hundreds of network devices, however, it is impossible for the network 
manager to perform a first hand inspection to determine the state of the entire network at any 
given time. 

A managed network often encompasses a plurality of subnets. A subnet is a group of 
network devices belonging to a specific block, or subset, of IP addresses. For example, one type 
of subnet comprises IP numbers that share the first three octets, as for example 21 5.223.46.x 
(where M x" can be any number from 0 to 255). Larger subnets may share only the first two octets 
(e.g. 215.223.x.y). In addition to subnets, networks may also include individual IP numbers or 
ranges of IP numbers. A network manager generally knows which subnets are included in the 
network being managed. However, the network manager will not necessarily know beforehand 
the IP number of a network device to be added to a network, particularly if the IP number is not 
within one of the network's known subnets. 

In addition to knowing the identity and physical configuration of the network devices 
themselves, it is also important for the network manager to be able to monitor logical 
connections between.network devices. A logical connection exists between network devices 
when at least one port of a first network device is configured so that a message sent out through 
that port would arrive at a known destination (either a network address or a second network 
device). The destination may be a particular port or interface on another network device, a 
particular IP address, or a particular subnetwork. One system used to discover logical links 
between network devices is described in U.S. Patent Application No. , titled 
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"Method and Apparatus for Automatic Discovery of Logical Links between Network Devices" 
assigned to the assignee of the present invention, and incorporated by reference herein. 

Several prior art network management systems provide tools that allow a network 
manager to gather certain information about network devices within the network For example, 
5 one prior art system allows a network manager to send queries to each possible IP number in a 
subnet or other range of IP numbers ("IP number polling") to determine whether a network 
device is associated with that IP number. If a network device is found, it is automatically added 
to the network management system's database of managed network devices. This prior art 
network device discovery system thus ascertains newly added network devices, however, it 
10 cannot distinguish between network devices with IP forwarding capabilities and those without. 
I* Furthermore, it does not discover network devices outside of the range of IP numbers being 
2 searched, nor does it allow a network manager to exert control over which of the newly 

fU discovered network devices are to be managed by the network management system. 

M 
CO 

H Other prior art network management systems are only capable of creating and configuring 

Jus network devices (routers) on a per router basis only, nor do they employ an "IP link" concept for 

5 configuring both endpoints (router interfaces) at the same time. This limitation is often prone to 

*B errors. Many prior art network management applications perform IP link configuration using 

P 

Command Line Interface (CLI) scripts, which are command driven, text-based user interfaces to 
a network device. CLI scripts tend to be error prone and are not easy to debug. In addition, prior 
20 art applications do not provide an IP link network provisioning which includes the Asynchronous 
Transfer Mode (ATM) path. 

Therefore, what is needed is a method of network management that provides the ability to 
provision both ends of the IP link at the same time, facilitate the matching of the parameters, and 
handle the underlying layers through one graphical user interface (GUI). 
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An embodiment of the present invention provides a method for network management that 
allows the configuration of IP links (a pair of interfaces) in one step, via a dedicated graphical 
user interface (GUI) form, even though the management protocols available at the two end links 
(routers) may differ, e.g., one router might use Simple Network Management Protocol (SNMP) 
or some other protocol, while the other might use Cornmand Line Interface (CLI) or another 
protocol. The method comprises gathering information from the user, validating this 
information, and then sending this information to the appropriate router(s). In one embodiment, 
the method enables a user to specify various configurations when provisioning an IP link, for 
example, the type of IP link (Point-to-Point, Point-to-IP, or Point-to-Subnet), the numbering type 
(Numbered or Unnumbered), the application type (IP Forwarding, MPLS and IP Forwarding, or 
MPLS only), and the sub-layer interfaces to be used (Packet Over Sonet, Asynchronous Transfer 
Mode, GigEthemet, and others). In addition, the method allows the IP link to be associated to 
existing (already created) router intcrface(s), or the interfaces can be created as part of the IP link 
creation process. 

When provisioning the IP link as disclosed in the various embodiments herein, all the 
data is validated to ensure that no errors are introduced that would prevent IP/MPLS 
connectivity. The method for provisioning of IP links as taught herein includes, but is not limited 
to, creation of an IP link, deletion of the IP link, and modification of the IP link. The embodied 
provisioning of IP links creates and/or modifies the router interface on the router(s) in the 
network, the MPLS attribute on the router(s), and the lower layer connections to achieve 
connectivity. With the method, the IP link status is associated with the router interfaces used and 
the network path over which IP traffic is carried. 

An advantage of at least one embodiment of the present invention is that end-to-end 
provisioning of the IP link is possible, even when routers are not physically directly connected, 
i.e., across a network cloud. 
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Another advantage of at least one embodiment of the present invention is that 
provisioning may be accomplished as a one-step activity conducted via a dedicated GUI form. 

Another advantage of at least one embodiment of the present invention is that validation 
of data entered on the dedicated GUI form is provided to avoid incompatible configuration at the 
ends of the connection, thus reducing routing configuration errors. 

A further advantage of at least one embodiment of the present invention is that the 
method may be applied to network management of networks comprised of equipment from a 
diverse range of manufacturers to configure IP links in one step, even though the management 
protocols available at two end routers may be different 

Yet another advantage of at least one embodiment of the present invention is the time 
savings made possible over current methods which require configuring a router interface on a per 
router basis. 

Other objects, advantages, features and characteristics of the present invention, as well as 
methods, operation and functions of related elements of structure, and the combinations of parts 
and economies of manu facture, will become apparent upon consideration of the following 
description and claims with reference to the accompanying drawings, all of which form a part of 
the specification, wherein like reference numerals designate corresponding parts in the various 
figures, and wherein: 
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BRIEF DESCRIPTION OF T HE DRAWINGS 



Figure 1 is a schematic of a data communications network that utilizes data forwarding 
and logical links; 

Figure 2 is a diagram of the Open Systems Interconnect (OSI) Reference Model 
5 developed by the International Standards Organization (ISO) generally used to describe the 
structure and function of data communications protocols; 

Figure 3A is a flowchart illustrating a method for providing IP link creation for network 
?g management according to at least one embodiment of the present invention; 

P 

ru 

Figure 3B is a continuation of the flowchart illustrating a method for providing IP link 
[fe creation for network management according to at least one embodiment of the present invention; 

s 

!*[ Figure 3C is a further continuation of the flowchart illustrating a method for providing IP 

*B link creation for network management according to at least one embodiment of the present 
.y, invention; and 

Figure 4 is an illustration of an example of an IP link provisioning GUI according to at 
15 least one embodiment of the present invention. 

Figure 5 is a flow diagram illustrating a method for provisioning logical configuration 
links for network devices in accordance with an embodiment of the invention. 
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Figure 6 is a flow diagram illustrating a process for creating a new logical configuration 
link in accordance with an embodiment of the present invention. 

Figure 7 is a block diagram illustrating apparatus for provisioning logical configuration 
links in accordance with an embodiment of the present invention. 
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Figures 3 A - 4 illustrate a method for provisioning IP links. In one or more 
embodiments, the invention comprises a network and service management system, such as, for 
example, the Alcatel 5620 Network Management System. In various embodiments, the 
invention is implemented by means of software programming operating on personal computers, 
computer workstations and or other computing platforms. In the following description, 
numerous specific details are set forth to provide a thorough description of the invention. 
However, it will be apparent to one skilled in the art that the invention may be practiced without 
these specific details. In other instances, well-known features have not been described in detail 
so as not to obscure the invention. 

Figures 3 A, 3B, and 3C comprise a flowchart illustrating a method for providing IP link 
creation for network management according to at least one embodiment of the present invention. 
The IP link component of the network management system (NMS) as disclosed herein is used to 
configure a router interface and represent a logical IP connectivity between two routers. When a 
user configures an IP link of the network management system as disclosed herein, the user can 
configure the category of the link that identifies whether the IP link is a peer, access, or within 
network IP link. The endpoint interface configurations of an IP link determine what IP packets 
are being carried through the IP link, and hence the type of application one may run between the 
two routers. These applications include IP forwarding, MPLS and IP forwarding, or MPLS. The 
IP routing protocols (ISIS, BGP, OSPF) can use the IP link to route packets between routers if 
the link has been enabled with IP forwarding. IP Forwarding IP Link as disclosed herein can run 
over a NMS Virtual Channel Connection (VCC) path (network cloud) if the IP Link Sub layer 
type is ATM. The MPLS and IP Forwarding Link is used for enabling MPLS signaling and IP 
forwarding between two adjacent routers. The MPLS IP Link is used to enable MPLS signaling 
between two adjacent routers and to disable IP forwarding on some router interfaces where IP 
forwarding is not supported, but MPLS is supported. The connectivity also helps the NMS user 
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to route LSP (Label Switched Path). The IP link of the disclosed NMS encapsulates the layer 2 
(of the OSI Model) complexity, since in practice the logical connectivity is mapped to a one-hop 
or multiple hops or paths (across a network cloud). The IP link component of the NMS does not 
configure the routing protocols, however it does configure the MPLS protocol. The network 
manager (user) configures the other routing protocols using the router Element Management 
application or CLI (Command Line Interface). 

There are various features of the embodied NMS which are valuable to the network 
manager, for example, the single sided (point-to~IP or point-to-subnet) IP link is useful for 
configuring only one side of the IP link, representing the other side on the IP Map with the IP 
address or subnet address and indicating the status of the IP link (or status of the router 
interface). That is, the user could use the NMS to "see" an IP link representing access to the 
Internet, or an IP link showing connectivity to an unmanaged router. The term unmanaged router 
as used herein refers to a router which is not managed by the embodied NMS, and the term 
managed router as used herein refers to a router which is managed by the embodied NMS. 

Referring to Figure 3 A, the first page of the flowchart, the network manager (user) is 
presented with the option to select a new IP link type to create in step 303. There are three types 
of IP links that a user may configure: Point-to-Point, Point-to-IP, or Point-to-Subnet It should 
be noted that more than one IP link can exist between two routers, however, only one IP link can 
exist between router interfaces. When the user wants to create a point-to-point link between two 
routers, if both routers are managed, the user executes step 307 and selects the Point-to-Point IP 
link type. If one of the routers is not managed by the IP link component of the NMS (network 
management system) as disclosed herein, the user executes step 305 by selecting the Point-to-IP 
link type. 

Should a user wish to create a "broadcast" interface on a router, the user executes step 
309 by selecting the Point-to-Subnet IP type. Interface as used herein refers to an interface on a 
router, or an (L3) interface, which is an interface with an IP configuration associated with it. In 



13 




1400.1374890 



10 



0 

o 
ru 

VI 

ce 

r y 
M 

to 

ru. 
u 

\S 
C3 
M 



20 



order to forward IP packets, a router interface must be bound to at least one sub layer interface 
per RFC2233. Note that an interface is created by the action of creating an IP link from the GUI 
of an embodiment of the present invention, and is visible in an embodiment of the present 
invention via the "List Interface" window if the router that contains the router interface is 
managed by the embodied NMS. An interface can be an endpoint of an IP link, and can be 
created, configured, or deleted as part of the creation/contlguration/deletion of an IP link. 

For a point-to-point link selection in step 307 for which both routers are managed by the 
embodied NMS, the router interface for both routers, i.e. with router A at one end and router B at 
the other end, would be set to be visible to the user in step 308. If apoint-to-lP link selection is 
made in step 305, only one end is managed by the NMS, and although both endpoints would be 
visible to the user, the fields related to the unmanaged router or router interface would be hidden 
(from the user) in tab panels of the GUI form, as indicated in step 306. In a point-to-IP link, the 
IP address would be that of the router or the router interface on the unmanaged router. 

For a point-to-subnet link (broadcast interface) selection in step 309, only one router is 
managed by the NMS, thus endpoint B would be set to invisible, and all fields related to 
endpoint B would be hidden in tab panels of the GUI form, as seen in step 311. Thus for point- 
to-subnet, the NMS user would configure the interface at endpoint A only. By "visible," it is 
meant that a graphical representation of the routers and IP links would be visible to the network 
manager (user) in a GUI form, while "invisible" means that a graphical representation of a router 
would not be visible in GUI form. When the user creates an IP link "point-to-subnet," the subnet 
is created if it doesn't already exist in the NMS database. The subnet address is taken from the 
router interface configured on the IP link, and the interface IP address must be a broadcast 
address, i.e., the IP network mask address is not equal to all ones). 

When either step 308 or step 306 has been executed, the user selects a link numbering 
type in step 313. Table 1 indicates the numbering types supported for interfaces, which are 
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created are created whenever an IP link is created with certain embodiments of the present 
invention. 
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Table L Interface Numbering Types Employed by Certain Embodiments of the Present 
Invention. 
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Numbering Type 



Numbered 



Unnumbered 



Null, Loopback 



Descriptions 



A) An IP address must be assigned to the interface. The IP 
address uniquely identifies the router interface (within that 
VPN domain). The network mask is 730 or /32 

B) Interface Numbered with Broadcast: 

An TP address is assigned to the numbered interface, and 
the IP prefix length is in the range of /0 to /29. This 
interface is used for broadcasting to a Subnet.. 

For example an Interface is assigned the following 
broadcast address: 

IP address = (1 38. 120.32.2) 

IP Network Mask = (255.255.255.0) 

Would result in an interface broadcasting to Subnet: 
138.120.32/24 



No IP address is assigned to the interface. 



These Interfaces are hot valid IP link endpoints but can be 
visible by listing this Interface. 



The link numbering selection of step 31 3 will not occur for point-to-subnet selection 309, 
as point-to-subnet interfaces must be numbered by default If "unnumbered" is selected in step 
314, the NMS sets the IP address and IP Netmask field to be invisible for the endpoints in step 
316. If "numbered" is selected in step 315, the NMS sets the IP address and Netmask field to be 
visible for the endpoints in step 317. The supported link types for numbered and unnumbered 
interfaces according to at least one embodiment of the present invention are summarized and 
presented in Table 2. 
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Table 2. Supported Lick Types for Numbered and Unnumbered Interfaces. 



IP Link Type 


IP Link 
Endpoint A 


IP Link 
Endpoint B 


Descriptions 


Point-to-Point 


Numbered 
Interface A 


Numbered 
Interface B 


Both Interfaces must 
be Numbered with a 
network mask of /30 
or/32. 


Point-to-Point 


Unnumbered 
Interface A 


Unnumbered 
Interfaces 


Both Interfaces must 
be Unnumbered 


Point-to-IP 


Numbered 
Interface A 


IP address of 
neighbor 
Interface 


Both Interfaces must 
be Numbered with a 
network mask or 730 
or /32 


Point-to-IP 


Interface 
(Unnumbered) 


IP address of 
neighbor 
Router 


Both Interfaces must 
be Unnumbered. 


Point-to-Subnet 


Numbered 
Interface A with 
network mask 
of/0to/29. 


Subnet 
Address 
(Note 1) 


Interface A IP 
Address must be 
numbered with a 
broadcast address. 
The Subnet address is 
derived from the 
interface A IP 
address. 



f 

(3 Again referring to Figure 3A, the user selects the link application in step 319. The 

application options available are IP forwarding in step 321, IP forwarding and MPLS in step 323, 
or MPLS in step 324. If IP forwarding is selected in step 321, the NMS sets the Multi-Protocol 
5 Label Switching (MPLS) tab to not accessible in step 322. For IP forwarding in step 323 and 
MPLS selection in step 324, the NMS, in step 325, will disallow multiple hops as routers must 
be physically, directly connected. In addition, in step 325 the NMS will disallow any Path 
support configuration. 

When an IP link is created, if the router interface does not exist, the NMS sub layer 
10 interface is used to create the router interface and the IP link In step 327, the user selects the sub 
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layer interface type. To create an IP link, at least one sub layer interface endpoint (port/channel) 
is required. The sub layer interfaces supported on routers by certain embodiments of the present 
invention are shown in Table 3 for the appropriate routers. 
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Table 3. Sub Layer Interfaces Supported on Routers. 



a™ 
vei/vci 


POS 
Un-Channelfzed 


POS 
Channelized 


GigEthernet 


Yes 


Yes 


Yes 


Yes 



From the data of Table 3, it is seen that the user can create an ATM IP link with an 
endpoint from/to: Router A to Router B. NMS managed router to unmanaged router is supported 
via "Point-to-IP ." Also, the user can create a POS Un-Channelized IP link with an endpoint 
5 from/to: Router A to Router B. Further, the user can create a POS IP Link with an endpoint 
from/to; Router A to a Router B channelized. NMS managed router to unmanaged router is 
supported via "Point-to-IP " In addition, the user can create POS channelized IP link from/to: 
Router A to Router B, Router A Un-charmelized to Router B. NMS Managed router to 

5 unmanaged router via "Point-to-lP." In addition, the user can create a GigEthernet IP link 

% between: Router A to Router B. NMS managed router to unmanaged router is supported via 

|g "Point-to-IP" or "Point-to-Subnet." 

M 

3 

The sub layer interface types available for the user to enable and which are supported by 

H certain embodiments of the present invention are ATM in step 329, Packet Over Sonet (POS) in 

■ n 

q step 330, and GigEthernet in step 332, shown in Figure 3B and Table 3.1. Figure 3B is a 
¥s continuation of the flowchart of Figure 3A. If ATM is selected in step 329, the NMS will set the 
"New" interface button to be visible on the GUI form, as in step 333. If either POS (step 330) or 
GigEthernet (step 332) is selected, the NMS system will set the "New" interface button to be 
invisible in step 335. Once the "New" interface button has been made visible in step 333, the 
user has the option in step 336 to create endpoint A or to paste an existing (already created) 
20 endpoint A. For the step 330 POS and step 332 GigEthernet options, only the paste endpoint 
option in step 337 would be available, as the •'New" interface button was made invisible in step 
335. Therefore, if pasting an existing endpoint A were chosen in step 337, the user performs a 
"List Interface" action from the NMS, selects the existing endpoint, and pastes the selection into 
the GUI form. Should the user wish to create a new endpoint A in step 336, in step 339 the user 

19 
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would select the "New" interface button on the GUI form, which would launch the "Select 
Router" form. The user would then perform a "List Router" action, select the router, and paste 
the selected router into the "Select Router" form. As a final action in step 339, after selecting 
and pasting the router, the user would click (select) the "Ok" button, and the control is returned 
5 to the NMS IP link GUI form. 



Table 3.1. Link Sublayer Interface Types Supported by Certain Embodiments of the 
Present Invention. 



IP Link Type 


Endpoint A 
Link Sublayer 
Interface Type 


Endpoint B 
Link Sublayer 
Interface Type 


IP Link Application 


Point-to-Point 


ATM 


ATM 


IP Forwarding: 

• Single hop supported 

• Mnltmte hftni are ^unnorted with the NMS ATM 
VCC path as option. If a NMS path is included, 
then both endpoints of the path must be ATM and 
terminating on the router. IP Link endpoints. 

MPLS & IP Forwarding, MPLS: 

• Single hop supported. When MPLS is enabled on 
the IP link, then only single hop is supported. 
NMS ATM VCC Path not supported 


Point-to-Point 


POS 


POS 


IP Forwarding, MPLS & IP Forwarding* MPLS: 

• Single hop supported, 

Note3 


Point-to-Point 


GigEthernet 


GigEthernet 


IP Forwarding, MPLS & IP Forwarding, MPLS: 

* Single hop supported, 

NoteS 


Point-to-IP 


ATM 


Not required (Note 
/, Note2) 


IP Forwarding 

• Single hop supported 

• Multiple hops are supported with the NMS path 
as options. If a NMS ATM VCC path is included 
then one of the endpoints of the path must 
terminate on the endpoint A. The other path 
endpoint could be of any supported endpoint type 
(ATM, Frame Relay, etc). 

MPLS & IP Forwarding, MPLS: 

• Single hop supported. When MPLS is enabled on 
the IP link then only single hop is supported. 
NMS ATM VCC path not supported. 


Point-to-IP 


POS 


Not required (Note 
I) 


IP Forwarding, MPLS & IP Forwarding, MPLS: 
• Single hop supported. 
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NoteS 


Point-to-IP 


GigEthernet 


Not required (Nate 
0 


IP Forwarding, MPLS & IP Forwarding, MPLS: 

• Single hop supported. 

NoteS 


Point-to-Subnet 


Any type 


Not required (Note 
0 


IP Forwarding, MPLS & IP Forwarding, MPLS: 

• Single hop supported and for Broadcast 
interfaces. 
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A'ore ^: The IP link interface endpoint B is not required but for the ATM VCC Path it is required. One of the ATM 
VCC path endpoints must be equal to IP link endpoint A and the other path endpoint is either a ATM or Frame 
Relay endpoint not terminating on a router. 

Note 3: For interface on the Router A (where router A has limitations), only IP Link application "IP Forwarding & 
MPLS" is supported. IP Forwarding and MPLS cannot be individually turned off. 

General Note: In order to provision the multiple-hops, the NMS path form is used. The number of hops used is 
determined automatically by the NMS Band Width Allocator (BWA). 

Again referring to Figure 3B, in step 340 the choice of endpoint B depends upon the IP 
link type. For example, for point-to-subnet 345, the NMS user configures the interface at 
endpoint A only, as the numbered interface A must be numbered with a broadcast address and 
the subnet address is derived from the interface A IP address. The rules associated with IP link 
endpoints according to the present disclosure are presented in Table 4. 



Table 4. IP Link Endpoints Rules. 



IP Link 
Endpoint A & 
B Binding 


B) Interface 
(Numbered) 


B) Interface 
(Unnumbere 
d) 


B) Subnet 


B)IP 
Address 


A) Interface 

(Numbered) 


V 

Allowed if 
netmask of 
endpoint A is 
/30or/32 


Not allowed 


Allowed if 
netmask of 
endpoint A is/0 
to/29 


V ( this is the IP 
address of 
neighbor 
Interface) 

Allowed if 
netmask of 
endpoint A is 
/30 or/32. 


A) Interface 
(Unnumbered) 


Not allowed 


W 


Not allowed 


(this is the IP 
addrcssof 
neighbor 
Router) 
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Thus if the point-to-point 1? link type of step 341 applied, both ATM in step 342 and 
POS-GigEthernet in step 343 could be applicable. For point-to-IP in step 344, the user would 
enter the IP address of Endpoint B, as in step 349. For point-to-subnet in step 345, no endpoint 
B is required, as seen in step 350, for reasons previously discussed. Should the POS-GigEthemet 
of step 343 apply, endpoint B could be pasted in step 348 in the same fashion as was 
accomplished for endpoint A in step 337. If the ATM of step 342 applied, the user would have 
the option in step 346 of creating endpoint B, or pasting endpoint B. Should the user choose to 
create a new endpoint B as in step 347, the procedure would be accomplished in the same fashion 
as for endpoint A in step 339, or alternately, if the endpoint B already existed, it could be pasted 
in the same fashion in step 348 as was accomplished in step 337 for endpoint A. 

Reference is how made to Figure 3C, the third page continuation of the flowchart 
illustrating a method for providing IP link creation for network management according to at least 
one embodiment of the present invention. Step 355 indicates that the information collected from 
the user during this session is used to populate the bottom form panels for GUI display. The 
information includes any pasted interface(s) information, if any were pasted in during the 
session. The user may choose to enter information into the General panel in step 357, if so 
desired, In step 359, the user enters the interface information. If the endpoint interfaces were 
pasted into the form (step 337 and/or step 348) instead of being created C*New") f then some of 
this information is derived from the endpoints, and the user can choose to modify the endpoint in 
step 359. 

In the case of ATM only IP links, in step 360 the user enters the sub layer interface 
information. For the other endpoint types, the sub layer interface information is displayed only. 
Some of the ATM and/or other endpoint sub layer interface information is derived by the NMS 
from endpoint information previously pasted into the form during the session. If the IP link type 
supports multiple hops, in step 360 the user has the option of pasting in an existing ATM Path. 
This action is accomplished by the user selection of path listings, and then selecting the pasting 
the existing ATM Path into the GUI window. Additionally, the user has the option in step 360 to 
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create a path, if one does not already exist by selecting the "ATM VCC Path" button, which 
launches thepath form. From the path form, the user creates a path, and the path is provisioned 
on the network. Once the path is created, the user may paste the path in the GUI window. 
Alternately, the user has the option in step 360 to specify no paths, if no paths are required. 



5 For MPLS IP link types, in step 362 the user would enter the MPLS information. In the 

case of ATM only IP links, in step 364 the user enters the ATM Traffic parameters. If a Path 
was pasted in the sub layer panel, then this information is derived by the NMS from the previous 
action (steps 327 through 339). If no path was specified, the NMS defaults the path information 
to default values. The user has the option, however, to override the default values. 



In step 366, the user clicks on the "Save" button on the form to begin the validation 
process for creating the IP link. Before anything is saved into the database, all rules and 
parameter ranges are verified. Nothing will be saved into the database if there is any verification 
fai lure, and will result in an error message being popped up stating the problem. In the various 
embodiments of the present invention, there are rules for validating the creation of an IP link in 
step 366. These rules are shown in Table 5. 



Table 5, Rules for Validating the Creation of an IP Link. 



1. Verify that the endpoints used by the IP Link are not already used by another IP links. 

2. Verify PoinMo-Point IP links that two interfaces (Endpoint A and Endpoint B) are provided when the 
interface exist, or thai two Routers & the Sublayer interfaces are provided when the interfaces don't 
exist (user wishes to create the endpoints). 

3. Verify Point-to-IP & Point-to-Subnet links that one interface (Endpoint A) is provided or that one 
Router & Sublayer interface is provided when the interface don- 1 exist, (user wishes to create the 
endpoint). 

4. Verify Point-to-IP links that the IP address (Endpoint B) is provided. The IP address could be one that 
already exist or a new IP Address. 

5. Verify Point-to-Subnet links that the interfaces (Endpoint A) is provided with an IP address set with a 
mask of not all one's (for example, 255.255.255.255 is invalid). In other words the IP Address is 
providing the Subnet network address. 

6. Verify that for numbered interfaces, an IP address and Network mask has been specified. 

7. Verify that for numbered interfaces, the IP address specified is unique within the network being 
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managed. 

8. Verify (Point-to-Point) that the interfaces used by the IP link have the same SubLayer type (ATM, POS. 
GigEthernet). 

9. Verify (Point-to-Point) that the interfaces used by the IP link have the same application type (MPLS, IP 
Forwarding & MPLS, IP Forwarding) 

10. Verify (Point-to-Point) that the interfaces used by the IP link have the same MTU. 

11. Verify (Point-to-Point) that the interfaces used by the IP link have unique names. 

12. Verify (Point-to-Point) that the interfaces used by the IP link have the same Bandwidth. 

13. Verify (Point-to-Point) that the ATM interfaces used by the IP link have the same VPI/VCI at each end 
or is equal to the ATM Path VPI/VCI when a path is used. 

14. Verify (Point-to-Point) that the interfaces used by the IP link have the same encapsulation (RFC 1483 
LCC/SNAP, RFC1483 Null Routed, PPP or Ethernet). 

1 5. Verify (Point-to-Point) that the interfaces used by the MPLS IP link have same MPLS protocol (CR- 
LDP,RSVP-TE). 

16. Verify (Point-to-Point) that the interfaces used by the MPLS IP link have same MPLS Label type 
(Generic, LC-ATM). 

17. Verify (Point-to-Point) MPLS IP link are single hop. 

1 8. Verify that the IP link endpoints matches the ATM Path endpoints when one is provided. 

19. Verify (Point-to-Point) that All ATM traffic parameters match for both CP Link endpoints. 

20. Verify that for some routers the MPLS link application is only "IP Forwarding & MPLS", 

2 1 . Verify that for some routers (compatibility) that the MPLS link uses is RSVP-TE protocol only. 

22. Verify that for some routers that only one unnumbered IP link is created to another router. Until the router 
restriction is removed. 

23. Verify that for some routers (restrictions) feat they are only one MPLS signalling link per VPI. 



□ 

?y 

\> 

te- 
rn 

H Finally, when all the verifications (validations) have passed (step 360), in step 370 the 

& network management system will send the configuration parameters are sent to the node (the 
[~j network elements involved) via SNMP and saved into the database (if SNMP was successful), 
p and the link status becomes "Link Down." If SNMP was not successful, the user is warned of the 
fa error. For some routers, CLI is used to send the information to the router. For CLI configuration 
the information is saved to the database and then sent down to the node. If the CLI command 
fails then it will log the error in the NMS ELS (Event Logging System) and the status of the IP 
link will reflect the failure. Creating the IP link will also create the Interface on the routers if 
10 they don't already exist. The Interfaces are created first and then the IP link.. If the IP link is not 
saved and the "Cancel" button is pressed, all the configurations will be lost. The IP Link status is 
changed to 'Link Down* until both Interface statuses are received from SNMP traps. When both 
Interfaces are up, the IP link status in the GUI window will change to 'Link Up.' 
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An IP Link can be created via the embodied NMS GUI manually, by SNMP IP Link trap 
for some routers, or by the auto-discovery process (per co-pending Application 



Network Devices"). An example of an IP link provisioning GUI window according to at least 
one embodiment of the present invention is shown in Figure 4, and generally designated example 
GUI Window 400. GUI window 400 typifies what a user would see for provisioning a new point- 
to-point IP link by opening the New->Link->IP Link->Point-to-Point configuration form (not 
illustrated). A window title 405 appears at the top of the form to indicate the purpose of the 
window. Hie user may select the Link Numbering Type (Numbered or Unnumbered) with Link 
Numbering Type selection button 407. Link Numbering Type selection button 407 has 
Numbered" selected in the example of Figure 4. The user may also select the Link Application 
(IP Forwarding, IP Forwarding and MPLS, or MPLS) with the Link Application selection button 
408. In the same maimer, the Link Sub layer Interface (ATM, POS, GigEthernet) may be 
selected with the Link Sub Layer Interface selection button 409. 

For Interface Endpoint A, the user selects the New button 410 to launch the New 
Interface window (not illustrated). The New Interface window title is 'New Interface,* and 

contains only one field, "Router: => *\ The user must paste the router (to create the 

interface on) in the New Interface window. Hie router can be selected via the map feature, the 
navigator feature, or the list router window (not illustrated). Once the router is selected, the user 
clicks on the paste button to paste the router in the single field of the New Interface window, and 
then selects the OK button. The new interface is then created, and automatically filled in the 
Interface Endpoint A Paste field 41 1 of GUI provisioning window 400. In a similar manner, for 
Interface Endpoint B, the user selects the New button 412 to open the new Interface window (not 
illustrated), pastes router B and selects OK. The selected router is then automatically pasted into 
the Interface Endpoint B Paste field 413. The user selects the Interfaces panel tab 415 to access 
the Interface panel 414, and enters the IP address of the two numbered interfaces being created in 
the respective IP address field areas 417 and 418. The user would then select the Sublayer 
Interface panel tab 419 to access the Sublayer Interface panel (not illustrated) in order to paste in 
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the "two ATM Port" used by the IP link, and then select the save button. Upon clicking the save 
button, the IP Forwarding IP link would be created with two new Numbered Interfaces. Other 
tab panels available in GUI window 400 may include a general tab 424, an MPLS tab 420, and 
an ATM traffic parameters tab 422. By default, the general configuration tab panel is displayed 
5 when the IP link configuration form is opened. 
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In the various embodiments of the present invention, various fields are available within 
the various GUI forms. Table 6 indicates the various fields displayed on the New IP Link forms. 
In Table 6, the following column headings are used to describe the fields in the forms: 

Panel Item Label : The name of a field in the form. 

Visible : The user can or cannot see the field in the form. "Always" visible means 

the user can see the field. "Never" visible means the user cannot see the field. 

Frozen : The field value is or is not editable. "Always" frozen means this field is not 

editable. "Never" frozen means this field is editable. The frozen field has the 

information if the item is configurable during the IP Link Configuration operation 

(ConfigMode: means during IP link configuration) 

Default Value : What is the default value for this field value. 

Valid Options : What is the valid value that a user can enter in this field. 

Affects On Other Fields : If changing the value of this field will affect the other 

fields. 



20 When creating an IP link up as taught herein, three Objects are created: the two router 

Interfaces and the IP Link. When paste Interface is selected, the Interface is not created, but is 
used. When new Interface is selected, then the Interface is created. 



Table 6. Fields Displayed on the New IP Link Form. 



Panel Item 
Label 


Visible 


Frozen 


Default 
Value 


Valid Options 


Affects On Other 
Fields/Comment 


IP Link 
Type is set 
when the 
window is 


N/A 


N/A 


N/A 


"Point-to-Point" 
"Point-to-IP* 
"Point-to- 
Subnet" 


Select point-to-point 
if you want a 'point- 
to-point' BP link and 
you are managing 
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Pane! Item 
Label 


Visible 


Frozen 


Default 
Value 


Valid Options 


Affects On Other 
Fields/Comment 


0 


opened. 
The IP link 
Type 
appears in 
the title of 
the window. 










both routers. 
Select point-to-IP if 
you want a 'point-to- 
point* IP link and you 
are managing only 
one router. 

if you want to create a 
broadcast interface. 
For Point-to-Point the 
Endpoint A and 
Endpoint B field 
become visible with 
there default 
For Point-tolP the 
endpoint B is the IP 
address. 

For Point-to-Subnet 
the Endpoint B is not 
visible. 


□ 

ry 

m 
m 

ru 

M 

>s 


Link 

Connection 
Type: 


; Always 


Never frozen 
in New 
mode. 

Always 
frozen in 
Config mode 


'Numbere 
d". 


"Numbered" 
"Unnumbered" 
for Point-to- 
Point and Point* 
to-IP. 

"Numbered** for 
Point-to-Subnet 


Changing this field to 
^Numbered** will 
require an IP address 
and IP network mask 
to be filled in for the 
interface(s). 

Changing this field 
to Unnumbered will 
result in the IP 
address and 
network mask to be 
invisible and not 
required. 

The user can paste 
in a unnumbered 
interface even if this 
field is set to 
Numbered. On the 
save, the interfaces) 
will be ch anged to 
whatever the Link 
Connection Type is 
set too. 

See 




Link 

Application 


Always 


Never frozen 
in New 
mode. 


♦•IP 

Forwardin 


"MPLS & IP 
Forwarding**, 
"IP 

Forwarding**, 


Select the type of 
application you want 
to run over the IP link. 
- "IP Forwarding** 
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Panel Item 
Label 


Visible 


Frozen 


Default 
Value 


Valid Options 


Affects On Other 
Fields/Comment 






Always 
frozen in 
Config 
Mode 




"MPLS" (will 
turnip 

forwarding off 
on forwarding 
interfaces, 
useful for LSP 
IP links on non- 
forwarding 
cards.) 


is used for 
forwarding only. 

- "MPLS & IP 
Forwarding" is 
used for both. 

- "MPLS" is used 
only if you are 
creating a ATM 

TP ItnV tn a 7670 
on non- 
forwarding cards. 
This option 
should not be 
used otherwise. 
When this field is set 
to "MPLS & IP 
Forwarding-* or 
"MPLS" the MPLS 
panel is accessible 
MPLS only supports 
single hop so the Path 
field is frozen. 


Link 

Sublayer 

Interface: 


Always 


Never frozen 
in New 
mode, but 
toggling 
between 
ATM, POS, 
GigEthemet 
will result in 
the fields 
being reset. 

Always 
frozen in 
Config 
Mode 


"ATM", 


ATM 
POS 

GigEthemet 


Select the Interface 
type you want 
ATM: 

When this field is set 
to 'ATM* the user 
can select New burton 
or Paste for the 
interface. New is the 
default 

The ATM Traffic 

Parameter panel is 

enabled. 

The Sub Layer 

Interface path field is 

available. 

POS: 

When this field is set 
to POS, the user 
cannot select new 
interface (the new 
button are greyed 
out), only paste 
interface is available 
since Interface are 
created when the card 
is inserted. 
The ATM Traffic 
Parameters panel is 
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Pane! Item 


Visible 


Frozen 


Default 


valid Uptions 


Atiecis un uiner 


Label 






Value 




Fields/Comment. 












frozen. 












i ne oud layer 
























POS parameters. 












G isEthernet 












wncn mis neia is sci 












to vjigxuncrnei me 












user cannot select new 












interface, only paste 












interface is available. 












The ATM TP panel is 












frozen. 












The Sublayer displays 












the uigbuiemet port. 


New button 


Always 


Frozen in 


N/A 


N/A 


For Endpoint A: 


for Endpoint 




New mode 






When this button is 


A. 




whenLink 






pressed the new 






Sublayer is 






Interface window is 






POSor 






opened 






GigEthemet 






ITie user can paste in 












a router. When the 






Never frozen 






users clicks ok the 






in New 






new Interlace is 






mode for 






entered in the paste 






ATM. 






field. The mteface 












created depends on 






Always 






the IP Link 






frozen in 






Numbering Type and 






configmode 






Sublayer Interface 












iiela. 












The Endpoint A will 












be created on the savef 


Paste for 


Always 


Frozen in 


N/A 


A valid 


For Endpoint A: 


Endpomt A 




New mode 




Interface from 


The user can paste in 




when IP link 




the List 


a valid interface. The 






Cult }a\7**r ic 

oud layer is 




Tn!>rfhf f* 


interface must he the 






ATM. 




window or the 


same type as the IP 










new interface 


Link Sublayer 






Never frozen 




window. 


Interface field. 






in new mdoe 






Allow the user to 






for POS or 






paste numbered or 






GigEthemet. 






unnumbered interface 












not matching the 






Always 






Connection type since 






frozen in 






on the save the type 






config mode 






will be changed 










accordingly. 












The Interface 












endpoint is of the 












following format: 
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Panel Item 
Label 


Visible 


Frozen 


Default 
Value 


Valid Options 


Affects On Other 
Fields/Comment. 












<RouterName/interfac 
e> 

Example: 
Toronto/ 0001 
No IP link must exist 
on the paste in 
Interface. 


New for 
Midpoint B 


Only visible when 
the Link Type is 
PoinMo-Point 
Not visible 
otherwise. 


Frozen in 
New mode 
when Link 
Sublayer is 
POSor 
GigEtbernet 

Never frozen 
in New 
mode for 
ATM. 

Always 
frozen in 
config mode 


N/A 


N/A 


For Endpoint B: 
When this button is 
pressed the new 

interlace winuuw is 
opened 

The user can paste in 
a router. When the 
users clicks ok the 
new Interface is 
entered in the paste 
field. The interface 
created depends on 
the IP Link 
Connection Type and 
Sublayer Interface 
field. 

The Endpoint B will 
be created on the save. 


Paste for 
endpoint B 


Visible when the 
Type is Point-to- 
Point. 


Frozen in 
New mode 
when IP link 
Sub layer is 
ATM. 

Never frozen 
in New 
mode for 
POSor 
GigEthernet 

Always 
frozen in 
config mode 


N/A 


A valid 
Interface from 
the List 
Interface 
window or the 
new interface 
window. 


For Endpoint B: 
The user can paste in 
a valid interface. The 
interface must be the 
same type as the IP 
Link Sublayer 
Interface field. 
Allow the user to 
paste numbered or 
unnumbered interface 
not matching the 
Connection type since 
on the save the type 
will be changed 
accordingly. 
No IP link must exist 
on the paste in 
Interface. 


IP Address 
Endpoint B: 


Only visible when 
Type is Point-to- 
IP 


Never frozen 
in New 
mode. 

Always 
frozen in 
config mode 


0.0.0.0 


Ipv4 


For Endpoint B: 
For Link Connection 
Type Numbered the 
field is the IP address 
of the neighbor router 
interface. 

For Link Connection 
Type Unnumbered 



30 



1400.1374890 



Panel Item 
Label 


Visible 


Frozen 


Default 
Value 


Valid Options 


Affects On Other 
Fields/Comment 












this field is the IP 
Address of the 
neighbor Router.(The 
Router ID of the 
neighbor router which 
is an IP address). 



In addition to creating an end-to-end IP link with an embodiment of the present invention, 
it is possible for a user to delete an Interface with the embodied NMS GUI as well as the CLI or 
the EM application. Certain interfaces such asPGS and GigEthemet are not deleted on a delete 
5 action but actually return to the default configuration, which is an unnumbered interface. The 
interface is deleted from the disclosed logical link database when any of the following actions 

. , occur: 

?** 

O 

O • The user selects the Interface (via the List Interface window) and performs Object->DeIete. 
Q The interface can only be deleted if no IP Link exists on the interface. If the interface is POS 
Jp> or GigEthernet, then this action is not permitted, 

M • The user deletes an IP Link by selecting it in the List IP link window and performing Object- 

3. 

U >Delete. 

S J • The card is deleted, in the case of POS and GigEthernet interfaces. 

^ <► The router is reconciled and the Interface is determined to no longer exist. 

O 

M$ • The router is deleted. In this case, the Interface is deleted within the logical link database, but 
is not deleted on the network. 
• The SNMP trap is received indicating an Interface was deleted on the node. 
When the user deletes an IP Link *Toint-to-Subnet," the subnet is deleted if it is the last IP link using 
the subnet. 

20 Figure 5 is a flow diagram illustrating a method for provisioning logical configuration 

links for network devices in accordance with an embodiment of the invention. The method may 
be used, for example, for provisioning logical configuration links for at least two network 
devices through a dedicated graphical user interface form. In step 501, a network device having 
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at least one network interface is selected through the dedicated graphical user interface form. In 
step 502, local interface and next neighbor information for the network device is determined. In 
step 503, a determination is made as to whether or not the local interface and next neighbor 
information is associated with a logical configuration link stored among a plurality of logical 
5 configuration links in a logical link database. If so, the process continues at step 509. If not, the 
process continues at step 504. 

In step 504, a new logical configuration link is created. In step 505, the new logical 
configuration link is stored in the logical link database. In step 506, the new logical 
configuration link is validated. In step 507, the new logical configuration link is sent to the 

10 network device. In step 508, a graphical representation of the new logical configuration link is 

. , displayed on a display device. 

b 

D 

(|j In step 509, a logical configuration link in the logical link database is modified. In step 

tS 510, a logical configuration link in the logical database is deleted. 

ru 

5 

M Figure 6 is a flow diagram illustrating a process for creating a new logical configuration 

ru 

link in accordance with an embodiment of the present invention. As an example, step 504 of 
p Figure 5 may comprise one or more of the steps illustrated in Figure 6. In step 601 , a link type is 
selected. Step 601 may comprise step 602. In step 602, the link type is selected from among a 
group consisting of: point-to-point, point-to-IP, and point-to-subnet. In step 603, a link 
numbering type is selected for the new logical configuration link. Step 603 may comprise step 
20 604. In step 604, the link numbering type is selected from a group consisting of: a numbered 
type and an unnumbered type. In step 605, a link application is selected for the new logical 
configuration link. Step 605 may comprise step 606. In step 606, the link application is selected 
from a group consisting of: Internet Protocol Forwarding, Multi-Protocol Label Switching and 
Internet Protocol Forwarding, or Multi-Protocol Label Switching. In step 607, a sub layer 
25 interface type is selected. Step 607 may comprise step 608. In step 608, the sub layer interface 
type is selected from a group consisting of: Packet Over Sonet, Asynchronous Transfer Mode, 
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and GigEthernet. In step 609, a first endpoint is created for the new logical configuration link. 
In step 61 0, a second endpoint is created for the new logical configuration link. 

Figure 7 is a block diagram illustrating apparatus for provisioning logical configuration 
links in accordance with an embodiment of the present invention. Display device 701 comprises 
graphical user interface 702. Graphical user interface 702 comprises graphical representation 
703. Display device 701 is coupled to processing system 704. Processing system 704 is coupled 
to logical link database 705. Processing system 704 and logical link database 705 are coupled to 
network system 706. Network system 706 is coupled to network devices 707, 70S, and 709. The 
illustrated couplings serve as an example; various elements may be coupled in various ways. 
Also, the illustrated elements may represent more complex configurations of components. For 
example, network devices 707-709 and/or network system 706 may include more complex 
configurations, such as that illustrated in Figure 1. 

Logical link database 705 stores logical configuration links. Processing system 704 
accesses the logical link database 705. Display device 701 provides the ability to select a 
network device having at least one network interface through graphical user interface 702. 
Processing system 704 determines local interface and next neighbor information for a network 
device, such as a network device 707-709 selected through graphical user interface 702. 
Processing system 704 determines whether the local interface and next neighbor information is 
associated with one of the logical configuration links stored in the logical link database 705. 
When the local interface and next neighbor information is not associated with any of the logical 
configuration links stored in the logical link database, processing system 704 creates a new 
logical configuration link. 

Processing system 704 causes the new logical configuration link to be stored in the 
logical link database 705; Processing system 704 validates the new logical configuration link. 
Processing system 704 causes the new logical configuration link to be sent to the network device 
707-709 to which it corresponds. 
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The various functions and components in the present application may be implemented 
using an information-handling machine such as a data processor, or a plurality of processing 
devices. Such a data processor may be a microprocessor, microcontroller, microcomputer, 
digital signal processor, state machine, logic circuitry, and/or any device that manipulates digital 
information based on operational instruction, or in a predefined manner. Generally, the various 
functions, and systems represented by block diagrams are readily implemented by one of 
ordinary skill in the art using one or more of the implementation techniques listed herein. 

When a data processor for issuing instructions is used, the instruction may be stored in 
memory. Such a memory may be a single memory device or a plurality of memory devices. 
Such a memory device may be a read-only memory device, random access memory device, 
magnetic tape memory, floppy disk memory, hard drive memory, external tape, and/or any 
device that stores digital information. Note that when the data processor implements one or more 
of its functions via a state machine or logic circuitry, the memory storing the corresponding 
instructions may be embedded within the circuitry that includes a state machine and/or logic 
circuitry, or it may be unnecessary because the function is performed using combinational logic. 

The method and apparatus herein provides for a flexible implementation. Although the 
invention has been described using certain specific examples, it will be apparent to those skilled 
in the art that the invention is not limited to these few examples. For example, the disclosure is 
discussed herein primarily with regard to provisioning network devices having IP and MPLS 
forwarding capabilities, the invention is applicable to network devices having forwarding 
capabilities using other protocols as well. Additionally, various types of routers and line cards 
are currently available which could be suitable for use in employing the method as taught herein. 
Note also, that although an embodiment of the present invention has been shown and described 
in detail herein, along with certain variants thereof, many other varied embodiments that 
incorporate the teachings of the invention may be easily constructed by those skilled in the art. 
Benefits, other advantages, and solutions to problems have been described above with regard to 
specific embodiments. However, the benefits, advantages, solutions to problems, and any 
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element(s) that may cause any benefit, advantage, or solution to occur or become more 
pronounced are not to be construed as a critical, required, or essenti al feature or element of any 
or all the claims. Accordingly, the present invention is not intended to be limited to the specific 
form set forth herein, but on the contrary, it is intended to cover such alternatives, modifications, 
and equivalents, as can be reasonably included within the spirit and scope of the invention. 
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WHAT IS CLAIMED IS: 

1. A network administration method for provisioning logical configuration links for at least 
two neUvork devices through a dedicated graphical user interface form, the method comprising: 

selecting a network device having at least one network interface through the dedicated 
graphical user interface form; 

determining local interface and next neighbor information for the network device; 

determining whether the local interface and next neighbor information is associated with 
a logical configuration link stored among a plurality of logical configuration links in a logical 
link database; 

creating a new logical configuration link when the local interface and next neighbor 
information is not associated with any of the logical configuration links in the logical link 
database; 

storing the new logical configuration link in the logical link database; 

validating the new logical configuration link; 

sending the new logical configuration link to the network device; and 

displaying a graphical representation of the new logical configuration link on a display 

device; 

2, The method of claim I , wherein the step of creating a new logical configuration link 
further comprises the steps of: 

selecting a link type; 

selecting a link numbering type for the new logical configuration link; 
selecting a link application for the new logical configuration link; 
selecting a sub layer interface type for the new logical configuration link; 
creating a first endpoint for the new logical configuration link; and 
creating a second endpoint for the new logical configuration link. 

3> The method of claim 2, wherein the step of selecting the link type further comprises the 
step of: 
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selecting the link type from among a group consisting of: point-to-point, point-to-IP, and 
point-to-subnet. 

4. The method of claim 2, wherein the step of selecting a link numbering type further 
comprises the step of: 

selecting the link numbering type from a group consisting of: a numbered type and an 
unnumbered type. 

5. The method of claim 2, wherein the step of selecting a link application further comprises 
the step of: 

selecting the link application from a group consisting of: Internet Protocol Forwarding, 
Multi-Protocol Label Switching and Internet Protocol Forwarding, and Multi-Protocol Label 
Switching. 

6. The method of claim 2, wherein the step of selecting a sub layer interface type further 
comprises the step of: 

selecting the sub layer interface type from a group consisting of: Packet Over Sonet, 
Asynchronous Transfer Mode, and GigEthemet 

7. The method of claim 1 , further comprising the step of: 
modifying a logical configuration link in the logical link database. 

8 . The method of claim I , further comprising the step of: 

deleting a logical configuration link in the logical link database. 

9. Apparatus for provisioning logical configuration links comprising: 

a logical link database for storing logical configuration links; 

a processing system coupled to the logical link database for accessing the logical link 
database; and 

a display device coupled to the processing system for displaying a graphical user 
interface form comprising a graphical representation of a logical configuration link. 
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1 0. The apparatus of claim 9 wherein the display device provides an ability to select a 
network device having at least one network interface through the graphical user interface form. 

$ 11. The apparatus of claim 9 wherein the processing system determines local interface and 
next neighbor information for the network device. 

1 2. The apparatus of claim i 1 wherein the processing system determines whether the local 
interface and next neighbor information is associated with one of the logical configuration links 

10 stored in the logical link database. 

13. The apparatus of claim 12 wherein the processing system creates a new logical 

p configuration link when the local interface and next neighbor information is not associated with 
Q any of the logical configuration links stored in the logical link database. 



m 



14. The apparatus of claim 1 3 wherein the processing system causes the new logical 
configuration link to be stored in the logical link database. 



^ 15. The apparatus of claim 14 wherein the processing system validates the new logical 
configuration link. 



16. The apparatus of claim 1 5 wherein the processing system causes the new logical 



configuration link to be sent to the network device. 
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METHOD AND SYSTEM FOR IP LINK MANAGEMENT 



ABSTRACT O F THE DISCLOSURE 
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An embodiment of the present invention provides a method for network management that 
allows the configuration of IP links in one step, via a GUI form, even though the management 
protocols available at the two end links (routers) may differ. According to one embodiment, the 
method comprises gathering information from the user, validating this information, and then 
sending this information to the appropriate router(s). According to one embodiment, the method 
enables a user to specify various configurations when provisioning an IP link, for example, the 
type of IP link (Point-to-Point, Point-to-IP, or Point-to-Subnet), the numbering type (Numbered 
or Unnumbered), the application type (MPLS and/or IP Forwarding), and the sub-layer interfaces 
to be used (Packet Over Sonet, Asynchronous Transfer Mode, GigEthernet, and others). In 
addition, according to one embodiment, the method allows the IP link to be associated to existing 
router interface^), or the interfaces can be created as part of the IP link creation process. 
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United States Patent and Trademark Offige 



Commissioner for Stents 
Uhiteo States Patent and Trademark Office 

VtikSHMCIQH, O.C 2O20I 

www.uspfo.go/ 



I APPLICATION MUMBER | FILINC/RECEIPT DATE \ FIRST NAMED APPUCANT | ATTORNEY DOCKET NUMBER | 

1 " " " ' : ' 1400.1374890 



10fl)27,821 



12/19/2001 



Denis Proulx 



25697 

ROSS D. SNYDER & ASSOCIATES, INC. 
1 15 W1LO BASIN RD. 
SUITE 107 
AUSTIN, TX 78746 



CONFIRMATION NO. 9507 
FORMALITIES LETTER 



•OC000000007386887* 



Date Mailed: 01/29/2002 



NOTICE TO FILE MISSING PARTS OF NONPROVISIONAL APPLICATION 
FILED UNDER 37 CFR 1.53(b) 
Fifing Date Granted 

An application number and filing date have been accorded to this application. The item(s) indicated below, 
however, are missing. Applicant is given TWO MONTHS from the date of this Notice within which to file all 
required items and pay any fees required below to avoid abandonment. Extensions of time may be obtained by 
filing a petition accompanied by the extension fee under the provisions of 37 CFR 1.136(a). 

« The statutory basic filing fee is missing. 
Applicant must submit $ 740 to complete the basic fifing fee for a non-small entity, Ifappropnate, applicant 
may make a written assertion of entitlement to small entity status and pay the small entity filing fee (37 
CFR 1.27). 

• The oath or declaration is missing. 

A properly signed oath or declaration in compliance with 37 CFR 1.63, identifying the application by the 
above Application Number and Filing Date, is required. 

• To avoid abandonment, a late filing fee or oath or declaration surcharge as set forth in 37 CFR 1.16(1) of 
$130 for a non-small entity, must be submitted with the missing items identified in this tetter. 

• The balance due by applicant is $ 870. 



A copy of this notice MUST . be returned with the reply. 




Customer Service Center 
Initial Patent Examination Division/ 



03)308-1202 

PART 3 - OFFICE COPY 



9T 





PATENT APPLICATION 



MAY 0 9 m 



ficant(s): Proulx, et a!. 



Title: METHOD AND SYSTEM FOR IP LINK MANAGEMENT 



App. No.: 



10/027,821 



Filed: 12-19-2001 



Examiner: 



Unknown 



Group Art Unit: 



2673 



COPY OF PAPERS 
ORIGINALLY FILED 



Atty. Dkt. No. 1400.1374890 



Attention: Box Missing Parts 
Honorable Commissioner of 
Patents and Trademarks 



Washington, D.C. 20231 

RESPONSE TO NOTICE TO FILE MISSING PARTS OF APPLICATION 



In response to the Notice to File Missing Parts of Application mailed January 29, 2002, please find 
enclosed herewith: 
[3 a Transmittal Form; 

03 a copy of the Notice to File Missing Parts of Application; 

13 a Fee Transmittal Form w/Fee attached (checks U 1416 and 1427); 

13 a Combined Declaration and Power of Attorney executed on behalf of Alcatel Canada Inc.; 

^ an Assignment to Alcatel Canada Inc. with Recordation Form Cover Sheet; 

(3 a Petition for Extension of Time; and 

(3 a Return Receipt Postcard. 



Dear Sir: 



Respectfully submitted, 




Date 




Koss D. Snyder, Reg. No. 37,730 
Attorney for Applicants) 
Ross D. Snyder & Associates, Inc. 
115 Wild Basin Road, Suite 107 
Austin, Texas 78746 
(512) 347-9223 (phone) 
(512) 347-9224 (fax) 



loo 



TRANSMITTAL 
FORM 

» be used for all correspondence after initial filing) 
Total Number of Pages in this Submission 1 2 



Application Number: 10/027,821 
Filing Date: 12-19-2001 
First Named Inventor: Proulx, et a). 
Group Art Unit: 2673 
Examiner: Unknown 
Attorney Docket No.: 1400.1374890 




B Fee Transmittal Form. 
SI Fee Attached 

□ Amendment/Response 

□ After Final 

O AfXidaviis/Declaration(s) 
B Extension of Time Request 
O Express Abandonment 
Request 

□ Information Disclosure 
Statement 

□ Certified Copy of Priority 
Document(s) 

Q Response to Missing 

Parts/Incomplete 

Application 
(3 Response to Missing Parts 

under 37 CFRt.52 or 1.53 



ENCLOSURES (check all thai 
apply) 

SI Assignment Papers (for an 
Application) 
Drawings) 
_ Licensing-retated Papers 

□ Petition Routing Slip 
(PTO/SB/69)and 
Accompanying Petition 

□ To Convert a Provisional 
Application 

13 Power of Attorney, 
Revocation, Change of 
Correspondence Address 

□ Terminal Disclaimer 

□ Small Entity Statement 

□ Request for Refund 

□ After Allowance 
Communication to Group 



□ Appeal Communication to 
Croup (Appeal Notice. Brief, 
Reply Brief) 

O Proprietary Information 

Q Status Letter 

O Request for Corrected Filing 

Receipt 
O Letter to Draftsperson 

□ Formal Drawings (after 
initial filing) 

□ Issue Fee Transmittal 

□ Request for Corrected 
Assignment 

□ Additional Enclosure^) 
(please identify below): 



Remarks: 



Finn Name 


Ross D. Snyder & Associates, Inc. 
115 Wild Basin Road, Suite 107 
Austin, Texas 78746 


Signature of Applicant, 
Attorney, or Agent 


^ ^^^^ 


Name and Registration No.: 


Ross D. Snyder, Reg. No. 37,730 


Date: OVfo/oZ* 



t hereby certify thai this correspondence is being deposited with the United States Postal 
Service with sufficient postage as first class mail, in an envelope addressed to Assistant 
Commissioner for Patents, WashingtonJD.C 20231 on ^W r jl TLSL Z^O ?^ \ 



Ross D. Snyder 
Typed or Printed Name 




-P. ... _ 

^""/i/o .S 3-7 73Q 



("I 




$V EE TRANSMIT 
"_, for FY 2001 

" 9 20jp 



Pita* ftti vt WbitCt to Wtiii rrvhkjn. 

MOUNT OF PAYMENT ($) 1310.00 



METHOD OF PAYMENT (check one) 

1. {3 Th * Ccmmhitonrr h her* try iuCf>ortitd to cturgt 



rjepcslt Account Number 5Q. J 


Deposit Account 
NUmt 


Ross D. Snyder « 
Associates, Inc. 



B Gunn* Any A4dIU¥Ud ft* Required Under 3 7 CFR 
I. Id and .1.17 

□ Cfur»f (ht rust Fee Ui to J7 aft J. 18 ai dw 
(arib*a of the Notice of A ttowjnct 

Q Ajjpikanl ftaUre uwC enuiy tuttii, 
S<t 37 CFR 1.27 

2. Payment Enclosed: 

H Check Q Money Order Q Other 

FEE CALCULATION 
I. FILING FEE 



Large Entity Snufl Entity 
Fet Fee Fee Fee 
Code (f) Coot it) 


Fee 

Description 


Fee Paid 


101 740 201 370 


Utility filing 
fee 


740.00 


106 330 206 I6S 


Design (Sing 
fee 




107 SIO 207 255 


Plant ding 
fee 




108 740 208 370 


Refeut flUnf 
fee 




114 160 214 80 


Provisional 
fifing fee 





SUBTOTAL (I J ($) 740.00 



2. CLAIMS 



CUtfTU 


Extra 


Fee from 
below 


Fee Patd 


Total 
16 


<-20»> 
0 






Indep. 
Z 


(•3-) 
0 






Muhi*e On>- 









Urge Entity Small Entity 
Fee Fee Fee Fee 
Code ($) Code (S) 


Fee Description 


103 18 203 9 


CUnn in (Htm of 20 


102 64 202 42 


Independent ctabm m 
excess of 3 


104 280 204 140 


Multiple dependent cUlm 


109 84 209 42 


Reissue Independent 
cltkni over ordinal patent 


MO 18 210 9 


ftefcsue claims to excess of 
20 and over original 
patent 



SUBTOTAL (2) ($) 



tarn 

Application Number 


pier e a Known 
10/027,821 


Filing Date 


12-19-2001 


First Named Inventor 


Proulx, et al. 


Group Art Unit 


2673 


Examiner Name 


Unknown 


Attorney Docket Number 


1400.1374890 



FEE CALCULATION (continued) 
3. ADDITIONAL FEES 



Urge Entity Small Entity 
Fee Fee Fee Fee 
Code {%) Code it) 


Fee Description 


Fee Paid 


105 130 205 65 


Surcharge - late filing lee or oath 


1 30.00 


127 50 227 25 


Surcharge * late provisional filing fee 
or cover sheet 




139 130 139 130 


Non -English specification 




147 2,520 147 2,520 


For filing a request for 
reexamination 




112 920* 112 920* 


Requesting publication of S1S1 prior 
to Examiner action 




113 1,840* 113 
1,840- 


Requesting publication of Sift after 
Examiner action 




115 110 215 55 


Extension for reply within first 
month 




116 400 216 200 


FjcttruJon (or reply wlifcm second 
month 


400.00 


117 920 217 460 


Extension for reply wtinm third 




118 1.440218 720 


Extension for reply wfthta fourth 




128 1,960 228 980 


Extension for reply width fifth 
month 




119 320 219 160 


Notice of Appeal 




120 320 220 160 


FSJng a brief In support of ao appeal 




121 280 221 140 


Request tor oral hearing 1 




138 1,510138 1.510 


Petition to Institute a public use 
proceeding 




140 110 240 55 


Petition to revive - unavoidable 




141 1,28024! 640 


. Petition to revive • unintentional 




142 1,280 242 640 


Utility issue fee (or reissue) 




143 460 243 230 


Design Issue fee 




144 620 244 310 


Plant iiiue fee 




122 130 122 130 


Petitions to the Commissioner 




123 50 123 50 


Petitions related to provisional 
applications 




126 180 126 180 


Submission of Information Disclosure 
Stmt 




561 40 581 40 


Recording each patent assignment 
per property (times number of 
properties) 


40.00 


146 740 246 370 


Fifing a submission after final 
rejection (37 CFR 1.129(a)) 




149 740 249 370 


For each additional invention to be 
examined (37 CFR 1.129(b)) 




Other fee 
toedfy) 






Other fee 
(specify) 







Reduced by Basic Fifing Fee Paid SUBTOTAL (3) ($) 570.00 



SUBMITTED BY ROSS D. SNYDER « ASSOCIATES, INC 



Complete (if anpBcaWe) 



Typed or Printed Name I Ross D. Snyder, Re*: No. 37,730 



Signature 



J nw > jnyuer, iwg. nu. j/,/ jv* ^ 



Deposit Account 



COPYOFPAPEr>. 
ORIGINALLY FILED 




COPYOFfAPEf?S\ 
ORIGINALLY FILED ■ 



MAY 0 9 2KR Jj _____ 

D StftTEi^TENT AND TRADEMARK OFFICE 
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COMMISSIONW «W FfcTEKTC 

Umtco States P*tcht and Duocmark Ornce 

VAshmCTDm. 0.C, 20231 
WWW.LggtO.QCV 

FIRST NAMED APPLICANT | ATTORNEY OOCXgT NUMBER j 



APPLICATION NUMBER 



FILING/RECEIPT DATE 



10/027.821 



12/19/2001 



Denis Proulx 



1400.1374890 



26697 

ROSS D. SNYDER & ASSOCIATES, INC. 
115 WiLO BASIN RD. 
SUITE 107 
AUSTIN, TX 78746 



CONFIRMATION NO. 9507 
FORMALITIES LETTER 



-00000000007386897* 



Date Mailed: 01/29/2002 



NOTICE TO FILE MISSING PARTS OF NONPROVISIONAL APPLICATION 
FILED UNDER 37 CFR 1.53(b) 



filing Date Granted 



An application number and filing date have been accorded to this application. The item(s) indicated below, 
however, are missing. Applicant is given TWO MONTHS from the date of this Notice within which to file all 
required items and pay any fees required below to avoid abandonment Extensions of time may be obtained by 
filing a petition accompanied by the extension fee under the provisions of 37 CFR 1.136(a). 



• The statutory basic fifing fee is missing. 

Applicant must submit $ 740 to complete the basic filing fee for a non-small entity, if appropriate, applicant 
may make a written assertion of entitlement to small entity status and pay the smalt entity Wing fee (37 
CFR 127). 

• The oath or declaration is missing. 

A properly signed oath or declaration in compliance with 37 CFR 163, identifying the application by the 
abov& Application Number and Filing Date, is required. 

• To avoid abandonment, a late filing fee or oath or declaration surcharge as set forth in 37 CFR 1. 16(1) of 
$130 for a non-small entity, must be submitted with the missing items identified in this letter. 

• The balance due by applicant is $ 870. 



A copy of this notice MUST be returned with the reply. 



S^/hrszu^ 

Customer Service Center ^7? 

vision (ieS) 30 



Initial Patent Examination Division (W3) 308-1202 

PART 2 - COPY TO BE RETURNED WITH RESPONSE 

95/10/200* ItiRtiK! >>>0$C** JCQttUJ 

01 rC:iOl ?A0.CO 0>' 

»>? PC: 10$ 130.00 



fo3 



DECLARATION 
OR UTILITY OR DESIGN 
PATENT APPLICATION 

(37 CFR 1.63) 

Declaration Submitted with Initial Filing, OR 
Declaration Submitted after Initial Filing 
(surcharge (37 CFR 1. 16 (e)) required) 

As a below named inventor. Thereby declare that: 



Attorney Docket Number 1400.1374890 
First Named Inventor Proulx, et al. 

COMPLETE IF KNOWN 
Application Number: 10/027,821 
Filing Date: December 19, 2001 
Group Art Unit: 2673 
Examiner Name Unknown 



COPY OF PAPERS 
ORIGINALLY FILED 



My residence, post office address, and citizenship are as stated below next to my name. 
I believe 1 am the original, first and sole inventor (if only one name is listed below) or an original, first and joint 
inventor (if plural names are listed below) of the subject matter which is claimed and for which a patent is sought on the 
invention entitled: 

METHOD AND SYSTEM FOR IP LINK MANAGEMENT 

the specification of which: 
□ is attached hereto. 

13 was filed on (MM/DD/YYYY) 12-19-21001 as United States Application Number 10/027,821 and was amended on 
(MM/DD/YYYY) (if applicable). 

I hereby state that 1 have reviewed and understand the contents of the above identified specification, including the 
claims, as amended by any amendment specifically referred to above. 

I acknowledge the duty to disclose information which is material to patentability as defined in 37 CFR 1.56. 

! hereby claim foreign priority benefits under 3$ U.S.C 1 1 9(aKd) or 365(b) of any foreign applications) for patent or inventor's certificate* or 365(a) 
of any PCT mteoiational application which designated at least one country other than the United Slates of America, listed below and have also 
identified below; by checking the box. any foreign application for patent or inventor's certificate, or of any PCT international application having a 
filing date before that of the application on which priority is claimed. 



Prior Foreign 
Application Numbers) 


Country 


Foreign Filing Date 
(MM/DD/YYYY) 


Priority Not 
Claimed 


Certified Copy Attached? 
YES NO 
















































! hereby claim the benefit under 35 U.S.C 1 1 9(c) of any United States provisional apptication(s) listed below. 



Application Number(s) 


Fillne Data (MM/DD/YYYY) 











0 Additional provisional tppltcation numbers arc listed on a supplemental priority data sheet PTO/SB/02B attached hereto. 

1 hereby claim Che benefit under 35 U.S.C. 120 of any United States application^), or 365(c) of any PCT international application designating the 
United Slates of America, listed below and, insofar as the subject matter of each of the claims of this application is not disclosed in the prior United 
States or PCT International application in the manner provided by the first paragraph of 35 U.S.C 1 12, 1 acknowledge the duty to disclose 
information which is material to patentability as defined in 37 CFR 1.56 which became available between (he filing date of the prior application and 
the national or PCT international filing date of this application. 



VS. Parent Application or PCT 
Parent Number 


Parent Filing Date 
(MM/DD/YYYY) 


Parent Patent Number 
(if applicable) 















□ Additional U.S. or PCT international application numbers are listed on a supplementil priority data sheet PTO/SB/02B attached hereto. 



f ^ Attorney Docket No.: 1400. 1374890 

As a named inventor, I hereby appo^Tlhe following registered practitioner's) to prosccuteJK application and to transact all business 
in the Patent and Trademark Office connected therewith: 

Ross 0. Snyder, Reg. No. 37,730 

□ Additional registered practitioners) named on supplemental RegisUred Practitioner Information sheet PTO/SB/02C attached hereto. 

Direct all correspondence to: Ross D. Snyder & Associates, Inc. 

1 15 Wild Basin R ad-Suite 107 
Austin, Teias 78746 
Telephone: 512-347-9223 
Facsimile: 512-347-9224 

I hereby declare that all statements made herein of my own knowledge are true and that all statements made on informaiion and belief 
are believed to be true; and further that these statements were made with the knowledge that willful false statements and the like so 
made are punishable by fine or imprisonment, or both, under 18 U.S.C. 1001 and that such willful false statements may jeopard ize 
the validity of the application or any patent issued thereon. 



Given Name (first and middle [if any]) f 


Family Name or Surname 


Dennis S>tr 


1 Proulx 


Inventor's 
Signature 




Date 


F< I 7 /a oo2 


Residence 


City: Kanata 1 State: Ontario 1 Country: Canada 


I Citizenship: Canadian 


Post Office Address 1 1435 Houston Crescent 


City: Kanata 


I State: Ontario i ZIP: K2W 1B6 


[ Country: Canada 



Given Name (first and middle [if any]) 


Family Name or Surname 


Cnuong Ngoc l 


Neo 


Inventor's 
Signature 




Date 




Residence 


City;OttaW \J | State: Ontario ff| Country: Canada 


| Citizenship: Canadian 


Post Office Address I 1 Westwlnds Place 


City: Ottawa 


1 State: Ontario 


I ZIP: K2G6GS 


| Country: Canada 



Name of Additional Joint Inventor. 



□ A petition has been filed for this unsigned inventor 



Given Name (first and middle [if anyl) 


Family Name or Surname 


AttauUab 


Zabihi 


Inventor's 
Signature 




Date 




Residence 


City: Ottawa i State: Ontario I Country: Canada 


1 Citizenship: Canadian 


Post Office Address j 1712-1081 Ambleside Drive 


City: Ottawa 


I State: Ontario 


i ZIP: K2BSC8 


| Country: Canada 


Name of Additional Joini Inventor: O A petition has been filed for this unsi 


gned inventor 


Given Name (first and middle [if anyl) 


Family Name or Surname 


David Wing-Chung 


Chan 


Inventor's 
Signature 




Date 




Residence 


CttyTrTepean ^"TState: Ontario I Country: Canada 1 Citizenship: Canadian 


Post Office Address I 39 Mattamy Place 


City:Nepeao | State: Ontario 


I ZIP: K2G 6J9 


| Country': Canada 



Given Name (first and middle [if anyl) 


Family Name or Surname 


Felix 


Kate 


Inventor's 
Signature 




Date 


-2$ frb 2COZ 


Residence 


City: Ottawa j State: Ontario | Country: Canada 


1 Citizenship: Canadian 


Post Office Address | 1 147 Ambleside Drive 


City: Ottawa 


| State: Ontario 


I ZIP: K2B 8EZ 


| Country: Canada 



□ Additional inventors are being named on the _ 



^supplemental Additional Inventors) sheet(s) PTG/SB/02A attached hereto. 



2 



for 



"p£">v ^« PATENT APPLICATION 



^0*®* S) in The United States Patent and Trademark Office 

ApplinfSSfs): Proulx, etai. 

Title: METHOD AND SYSTEM FOR IP LINK MANAGEMENT 
App.No.: 10/027,821 Filed: 12/19/2001 

Examiner: Group Art Unit: 2673 ^^^D 
Atty.Dkt.No. 1400.1374890 — ~ 



Assistant Commissioner for Patents 
Washington, D.C. 20231 

PETITION FOR EXTENSION OF TIME 

Dear Sin 

This is a request under the provisions of 37 CFR 1 136(a) to extend the period for filing a response in the above 
identified application. 

The requested extension and appropriate fees are as follows: 

□ One month (37 CFR 1 .17(a)(1)) 10.00 
0 Two months (37 CFR 1.17(a)(1)) $400.00 

□ TTtree months (37 CFR 1.17(a)(1)) $920.00 

□ Four months (37 CFR 1.17(a)(1)) $1440.00 

□ Five months (37 CFR 1.17(a)(1)) $1960.00 

□ Applicant is a small entity under 37 CFR l.9and 1.25, therefore the fee amount shown above is reduced by 
one-half, and the resulting fee is: $ . A small entity statement under 37 CFR 1 .27 □ is enclosed or □ has 
already been filed in this application. 

A check in the amount of the fee is enclosed. 

O The Commissioner has already been authorized to charge fees in this application to a Deposit Account. 

[3 The Commissioner is hereby authorized to charge any fees which may be required, or credit any 
overpayment, to Deposit Account Number SO- 1566. Enclosed is a duplicate copy of this sheet. 



lly submitted, 




r ^ Snyder, Reg. No. 37,73< 

Anomey for Applicants) 

0*/id/20A2 MKiAHA* $KKMQ£t Ross D ' Sn y dcr & Associates, Inc 

01 FC:US 400.0* OP Austin, Texas 78746 

(512) 347-9223 (phone) 
(512) 347-9224 (fax) 




10/027,821 Method and system for IP link management 



04-21-2010:;07:13:54 



Patent Assignment Abstract of Title 



To taJ Assignments: t 

Application #: 1^7.78/1 Filing 01: IVUVfSl Patent *: NCHK 

pcj0i«am PuhikAitAA «: 'i6209ioijn:}2 

Inventus t>cnl» PtWlU, Alliu&»f> Z»t>.?.i. C *swui«j fH*(C KviO,tfaviil «iny C!wi?v Ctw% hrfui a*U 

Assignment: 1 

lbM/fra*mt di.wra; Uf/4 Received: ut-nVJiefl* Recorded; -nyoiv^W* 

Conveyance* assigwKni^ assi&^ks iNrmroi (Sit upCWWNr WK OTiAliS). 
AsstQnofs: .^6ti»X pttitt 

wo, ojuokjs kcoc 

/A&M 1 *. ATTAUOfl* 

owo. oavio wiK(v--t*nwic 
katz, reitx 

A»sh)rtOei AtC Am C A»AI>A INC. 
fc«0 ffAftCrt KOAtJ 
KAItAtA, OriTA^IO, CANADA KZ* 2 

Rosso.-swota a associates, ihe. 
Rft^n ij. swum 

1 15 virttj? oasim ri'ai>. siiirr. i«? 

AUSTIN. : YrxAS"W74* 



Issue Dt> 



Mailed: C//!/y«J3J^ 

t»ec Ol: OViVJWl 

:f-;v«ept: oi/j>/icwi 
fixee Dts 

Eiteeot: o;v?ty?iVtf 



Assignment information on the assignment database reflects assignment documents that have been actually recorded. 

If too assignment for a patent was not recorded, the name of Vie assignee on the patent optjltcoiton publication or patent may &c 

different 



ion 



4/2.1^010 6:1-1 AM 



A>7 



Attorney Pocket No.: 1400;! 374890 



OUR Me 0*il «MM<»r X-fli 



REa>RDATION FORM COVKRSHI-fiT 

PATENTS ONLY 



1 1,1. f)tr|xt»ii?i3i at C-<tattt« 

Patent and Trademark Office 



To U:e 'CmHufewKr of ftueriKt and TnMcnwkv- Pfeaxe rceoul (lie ithwilinJ ordinal uY<ufite&Tf*j <»' «py(ies). 



Nimw of eonveyitijg pm-fidj: 



(a) Douis Tmulx 
(cj Felix Kaia 



(b) Chuong Ngue'.Ngo 

(<ci ) David Wing-Clnmii; Gam* 

SIZZ _!ZL " I 



i-. \ Nature n f conveyance* 

m 

■L Secia'iiy A>nrr»ncn; 
!:*cet»:;ofl fttur: 



! (c) 02-27-02 



| (b) 02-27^)2 



CD 



<2; Nam* aiKtaildmtti u I Vi^ci v-iiii; p.'U ty f ics > ' 
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Aucwy Docket No.: 141)0.137.1890 

PATENT APPLICATION 
ASSIGNMENT OF U.S. PATEN I APPMCAl ION 



This is ah assignment of patent rights between the inventor(s) 



Denis Pi uulx 


CKitiong Ngoc Ngo ] 


Attaullah Zahibt 


Davitl Wing-Chung Chan \ 


Felix Katie; 



(herein after referred la as the Inventor) and .ALCA'KKL CANADA (NC, hayiii^ a place of 
business at 600 March Road. Kanala, Ontario, Canada K2K 2 B6 (herein attci referred io as the 
Assignee). 



WH BRHAS) Inventor has caused to be prepared on December 1 9; 2U01 1 a United States Patent 
ApplicatioivNutnber 1 0/027,821 in the Inventor's name entitled 

METHOl) AND. SYSTEM FOR IP 1, INK MANAGEMENT 

having a docket number of J 400 J 374890 (herein, afiei referred to us the Patented Invent ion); and 

WHEREAS, Assignee has a desire to acquire affrights, litte v and interest in the Patented 
invention. 

NOW, 1 HHRBFORB, theparties agree as follows; 

1 . The Inventor hereby sells; assigns, and transfers its entire rights, title, and interest in the 
Patented Invention and all patents thai may be granted therefrom due to divisions, reissue* 
substitutions, extensions, continuations, and continuations' in- part to -the Assignee. 

Z The Inventor hereby sells, assigns, and transfers its entire rights, title, and interest in any 
foreign (non VS.) national patent application, invention registration, or equivalent (Foreign 
Applications), claiming approximately the same subject matter of the Patented Invention to the 
Assignee. 

:K ; in.cbnsidcraliori for the sum of one dollar (SI) U.S. (or its equi valent) and other 
consideration tor which; both parties ackridwledge to be valuable, having been conveyed to the 
inventor by the Assignee for the sale, assignment, and trans fer of the Patented Invention and. 
Foreign Applications. Consideration may include at least one of: employment, an independent 
contractor agreement, monetary payment, or other benefit hereby acknowledged as received. 

4. Inventor hereby authorises and requests the Commissioner of Patents and Trademarks to 
issue the patent for the Patented Invention, and all resulting patents therefrom, insofar as 
Inventor- s interest is concerned, to the Assignee. 



I 



A(im.-y nockul NU: MOO. 1374890 



5. The Inventor further agrees to execute any and all powers of attorney, applications, 
assignments, declarations, affidavits, and any other papers in connection therewith necessary to 
perfect such rights, title, and interest in the Assignee. 

6. The Inventor hereby further agrees to communicate with the Assignee any facts its knows 
regarding any improvements of the Patented Invention while employed by Assignee and for one 
year thereafter. 

7. The Inventor hereby yet finiUcr agrees to. at the expense of the Assignee: 

i) testify in any legal proceedings. 

ii) sign all lawful papers, 

iii) execute all divisional, continuation, continuation-in-part', reissue and substitute 
applications, 

iv) make all lawful oaths, and assist in vesting title in the Assignee and to aid the 
Assignee to obtain and enforce proper .protection for the subject matter of the 
Patented Invention in all countries, and 

v) notify Assignee promptly (by facsimile or fust class mail) of any subpoena or 
contact by any person other than Assignee or its agents rcftM*din& the Application 
or resultant patent(s) issuing therefrom, and in any event at least one week prior to 
any deposition, legal inquiry or legal proceeding relating to the above identified 
invention. 

This assignment is executed on the date(s) of which the Inventor has signal. 



Inventor; 
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gf ATBMEN'i; OF WI TNES S 

^ 'J. J^&j^^e^Cc^J^ _» whose (iili post ofticc address is 

Jf J&h^ slate that I was personally present and did sec 

Denis Froulx, who is personally known to me to be die person named in Ihe above assignment, 
duly sign and execute the same on the dale sel forth above. 



^J^^^^ ^^r^ 4 ! _ _ 

/ / (Signature -of Witness) 



^I'ATKMEN T Q\* Wrj-NESS 

h ^/^^i^^^j^^;^ . v Vy'fiose fiiji post office address is 

, Sc/e^i/ ' Artptifr &W ; "kK^6$_ _»>tate thai 1 was personally present mid did see 
Clmong Ngor Nfcd, who is personally known to me to be the person named in the above 
assignment, duly sign and execute Ihe same on the date set forth above. 

^m^i^^/^k-yj^^ 




mime of Witness) 



S.TA.TBM BN ■! . Qp WITNESS 

JyS^A^ , whose full post office address ,is 

.5^Jkm/.,^. M^^MiCJ^MB^y stnie thf " 1 was personally present and did see 
AUaullah Zubtlii, who is personally known to mc to be the person named in the above 
assigJUuetUvduly sign and execute the same on the dale set forth above: 




(Signature of Witness) 



SXATfe^lf NT QF WITNB^S 

s i J$/btoi*_ ^y/cr^fdi : - whose lull post office address is 

^ } : ' /^^i^^LJ^'^B:^ slate thai 1 was personally present and did see 
David Wing^Chung Chan, who is personally known tome to be the person named in the above 
assignment, duly sign and execute the same on the date set forth above. 

0 



A. 



f (Slgnatui 



ignaturc of Witness) 



id 



Am».^y Docket No.. 1400.137-4890 



STATKMHNT OF WITNESS 

Jy 'fi^C'tapf , whose- fUl) post oflice address is 

jftft^ state that 1 was personally present and did see 

Felix Kate, who is personally known to rne to be tlm.person named in the qhovc assignment, 
duly sign and execute the same on the dale set forth above. 



^P^^j^.J^r.^J^:f^^ „ 

(Signaliirc ot* Witness) 
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U.S. Patent and Trademark Office: U.S. DEPARTMENT OF COMMERCE 
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COMMUNICATION 

"Hie European Patent Office herewith transmits as an enclosure the European search report for the 
above-mentioned European patent application. 

II applicable, copies of the documents died bvtho European search report are attached. 

□ Actional setts) of copies of the documents cited to the European search report is (are) enclosed 
as well. 

The totowtng specifications given by the applicant have been approved by the Search Division: 
03 abstract 00 We 

0 The abstract was modified by the Search Division and the definitive text Is attached to this 
communication. 

The following figure will be published together with the abstract 7 



REFUND OF THE SEARCH FEE 

H applicable under Article 10 Rules relating to tees, a separate communication 
from the Receiving Section on the refund of the search lee wffl be sent bier. 
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* figure 14 * 

US 5 175 800 A (PAGE STUART 1 ET AL) 
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* column 3, line 48 - column 4. line 60 * 

* column 5, line 45 - column 5, line 61 * 

* column 9, line 53 - column 12, line 20 * 

* column 13, line 51 - column 14, line 32 
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* column 17, line 55 - column 18, line 18 

* column 24, Hne 32 - column 26, Vine 52 
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* column 27, line 19 - column 28, line: 68 
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* column 44, line 10 - line 20 * 

* column 45, line 40 - column 46, line 17 
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* column 47, 11 he 1 - column 49, line 35 * 

* column 53, line 40 - column 54, line 25 

* column 56, line 41 - column 59, Hne 12 
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UNITED STATES DEPARTMENT Of COMMXRCC 
Uallrd SUlw P«tcnl »od TrwkcMrt ; Ofllce 
AAiKi* COMMISSIONER FOR PATENT* 
P O Bo* 1450 



| ATTORNEY DOCKET NO. | CONFIRMATION NO. 
" _ 9507 



1400.1374890 



EXAMINER 



ARSMAD.UMAR 



ART UNIT 



PAPER NUMBER 



2174 

DATE MAILED: 0&/27/2004 



Please find below and/or attached an Office communication concerning this application or proceeding. 



PTO-90C (Rev. 10/03) 





Application No. 


AppHcant(s) ]^/J 


Office Action Summary 


10/027.821 * 


PROULX ETAL 


Examiner 


Art Unit 






Umar Arshad 


2174 





Period for Reply 

A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) FROM 
THE MAILING DATE OF THIS COMMUNICATION. 

. Extensions o/ Ume may be evailaWe under the provisions of 37 CFR 1.1 36{n). h no event, however, may a reply be Umery filed 
after SIX (6) MONTHS from the mailing del© of this communication. 



Any reply \ eceiv^by Uhe O^cateter then ttTree a^er the moiling dale of this communicotion. even if timely fiJed. may reduce any 

d patent term adjustment See 37 CFR t .704(b). 



Status 

1)E3 Responsive to communication(s) filed on 19 December 2001. 
2a)D This action is FINAL. 2b)C3 This action is non-final. 

3) D Since this application Is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1935 CD. 1 1, 453 O.G. 213. 

Disposition of Claims 

4) E3 Claim(s) k16 is/are pending in the application. 

4a) Of the above ctaim(s) M is/are withdrawn from consideration. 

5) D Claim(s) is/are allowed. 

6) 13 Claim(s) £46 is/are rejected. 

7) Q Claim(s) is/are objected to. 

8) Q Claim(s) are subject to restriction and/or elecUon requirement. 

Application Papers 

9) D The specification is objected to by the Examiner. 

10)D The drawing(s) tiled on is/are: a)D accepted or b)D objected to by the Examiner. 

Applicant may not request lhat any objection to the drawing(s) be held in abeyance. See 37 CFR 1.85(a). 

Replacement drawing sheet(s) including the correction is required if the drawing(s) is objected to. See 37 CFR 1.121(d). 
! !)□ The oath or declaration is objected to by the Examiner. Note the attached Office Action or form PTO-152. 

Priority under 35 U.S.C. § 119 

12)D Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 1 19(a)-(d) or (f). 
a)D All b)D Some * c)D None of: 

1 .□ Certified copies of the priority documents have been received. 
2.Q Certified copies of the priority documents have been received in Application No. 



3.D Copies of the certified copies of the priority documents have been received in this National Stage 
application from the International Bureau (PCT Rule 17.2(a)). 
' See the attached detailed Office action for a list of the certified copies not received. 



Attachments) 

1) El Notice of References Cited (PTO-892) 

2) D Notice of Oraftspereon's Patent Drawing Review (PTO-948) 

3) (3 Infcrmalion Disclosure Statements) (PTO-1449 or PTO/SB/08) 

Paper No(syMail Date 6/100004 . 



4) Q Interview Summary (PTCM 13) 

Paper No(s)/Maa Date. . 

5) □ Notice of Informal Patent Application (PTO-152) 
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DETAILED ACTION 



Claim Rejections - 35 (JSC § 103 



The following is a quotation of 35 U.S.C. 103(a) which forms the basis for ail 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth In section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skiB in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

Claims 1 - 16 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Hansen, U.S. Patent No. 6,772,204 in view of Lam et al., U.S. Patent No. 6.381,237. 

As per claim 1, Hansen teaches a network administration method for provisioning 
logical configuration links for at least two network devices through a dedicated graphical 
user interface form, the method comprising: 

selecting a network device having at least one network interface through the 
dedicated graphical user interface form (see Hansen, column 12. lines 36 - 45); 

determining local interface and next neighbor information for the network device 
(see Hansen, column 12, lines 62 -66); 
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determining whether the local interface and next neighbor information is 
associated with a logical configuration link stored among a plurality of logical 
configuration links in a logical link database (see Hansen, column 13, lines 40 -48); 

validating the new logical configuration link (see Hansen, column 13, lines 25 - 



sending the new logical configuration link to the network device (see Hansen, 
column 15, lines 4 - 13); and 

displaying a graphical representation of the new logical configuration link on a 
display device (see Hansen, column 13, lines 52 - 56). 

Hansen does not teach creating a new logical configuration link when the local 
interface and next neighbor information is not associated with any of the logical 
configuration -links in the logical link database and storing the new logical configuration 
link in the logical link database. Lam teaches creating a new logical configuration link 
when connection information is not associated with any of the logical configuration links 
in the logical link database and storing the new logical configuration link in the logical 
link database (see Lam, column 9, lines 1 - 6). 

It would have been obvious to one of ordinary skill in the art at the time of the 
invention to incorporate the method of Lam with the method of Hansen in order to 
provide an up-to-date interface to the user. 

As per claim 2, which is dependent on claim 1, Hansen and Lam teach the 
method of claim 1 (see rejection above). Hansen further teaches the method of claim 1 , 



33); 
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wherein the step of creating a new logical configuration link further comprises the steps 
of: 

selecting a link type (see Hansen, column 13, lines 5 - 8); 

selecting a link numbering type for the new logical configuration link (see 
Hansen, column 14, lines 26 - 33); 

selecting a link application for the new logical configuration link (see Hansen, 
column 14, lines 26-33); 

selecting a sub layer interface type for the new logical configuration link (see 
Hansen, column 14, lines 26 - 33); 

creating a first endpoint for the new logical configuration link; and 

creating a second endpoint for the new logical configuration link (see Hansen, 
column 12, lines 36 - 45). 

As per daim 3, which is dependent on claim 2, Hansen and Lam teach the 
method of claim 2 (see rejection above). Hansen further teaches the method of claim 2, 
wherein the step of selecting the link type further comprises the step of selecting a 
point-to-point link type (see Hansen, column 13, lines 5-8). 

However, Hansen does not selecting the link type from among a group consisting 
of: point-to-point, poinl-to-IP, and point-to-subnet. The examiner takes official notice 
that point-to-IP and point-to-subnet link types are notoriously well known in the art of 
computer networks. It would have been obvious to one of ordinary skill in the art at the 
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time of the invention to incorporate point-to-IP and point-to-subnet link types with the 
method of Hansen in order to provide access to well established configurations. 

As per claim 4, which is dependent on claim 2, Hansen and Lam teach the 
method of claim 2 (see rejection above). Hansen further teaches the method of claim 2, 
wherein the step of selecting a link numbering type further comprises the step of 
selecting a numbered link numbering type (see Hanson, column 14, lines 26 - 28). 

Hansen does not teach selecting the link numbering type from a group consisting 
of: a numbered type and an unnumbered type. However, the unnumbered link 
numbering type is notoriously well known in the art of computer networks. It would have 
been obvious to one of ordinary skill in the art at the time of the Invention to incorporate 
the unnumbered link numbering type with the method of Hansen in order to provide 
access to well established configurations. 

As per claim 5, which is dependent on daim 2, Hansen and Lam teach the 
method of claim 2 (see rejection above). Hansen does not teach the method of claim 2, 
wherein the step of selecting a link application further comprises the step of: selecting 
the link application from a group consisting of: Internet Protocol Forwarding, Multi- 
protocol Label Switching and Internet Protocol Forwarding, and Multi-Protocol Label 
Switching. 

However, Internet Protocol Forwarding, Multi-protocol Label Switching and 
Internet Protocol Forwarding, and Multi-Protocol Label Switching are notoriously well 
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known in the art of computer networks. It would have been obvious to one of ordinary 
skill in the art at the time of the invention to incorporate Internet Protocol Forwarding. 
Multi-protocol Label Switching and Internet Protocol Forwarding, and Multi-Protocol 
Label Switching with the method of Hansen in order to provide access to well 
established configurations. 

As per claim 6, which is dependent on claim 2, Hansen and Lam teach the 
method of claim 2 (see rejection above). Hansen does not teach the method of claim 2, 
wherein the step of selecting a sub layer interface type further comprises the step of: 

selecting the sub layer interface type from a group consisting of: Packet Over 
Sonet, Asynchronous Transfer Mode, and GigEthemet. 

However, Packet Over Sonet, Asynchronous Transfer Mode, and GigEthemet 
are notoriously well known in the art of computer networks. It would have been obvious 
to one of ordinary skill in the art at the time of the invention to incorporate Packet Over 
Sonet, Asynchronous Transfer Mode, and GigEthemet with the method of Hansen in 
order to provide access to well established configurations. 

As per claim 7, which is dependent on claim 1 , Hansen and Lam teach the 
method of claim 1 (see rejection above). Hansen does not teach the method of claim 1 , 
further comprising the step of: modifying a logical configuration link in the logical link 
database. 
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Lam teaches modifying a logical configuration link in the logical link database 
(see Lam, column 10, lines 8 - 15). It would have been obvious to one of ordinary skill 
in the art at the time of the inveniion to incorporate the method of Lam with the method 
of Hansen in order to provide an up-to-date interface to the user. 

As per claim 8, which is dependent on claim 1 , Hansen and Lam teach the 
method of claim 1 (see rejection above). Hansen further teaches the method of claim 1 , 
further comprising the step of: 

deleting a logical configuration link in the logical link database (see Hansen, 
column 1 3, lines 37 - 39). 

As per claim 9, Hansen teaches an apparatus for provisioning logical 
configuration links comprising: 

storing logical configuration links (see Hansen, column 14, lines 53-61); 

a processing system for accessing the stored logical configuration links; and 

a display device coupled to the processing system for displaying a graphical user 
interface form comprising a graphical representation of a logical configuration link (see 
Hansen, column 3 f lines 12 - 20 and column 5, lines 19 - 26). 

Hansen does not teach a logical link database for storing logical configuration 
links. Lam teaches a logical link database for storing logical configuration links (see 
Lam, column 1 , lines 56 - 58). It would have been obvious to one of ordinary skill in the 
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art at the time of the invention to incorporate the method of Lam with the method of 
Hansen in order to provide a resource of data describing connections in a network. 

As per claim 10, which is dependent on claim 9, Hansen and Lam teach the 
method of claim 9 (see rejection above). Hansen further teaches the apparatus of claim 
9 wherein the display device provides an ability to select a network device having at 
least one network interface through the graphical user interface form (see Hansen, 
column 12, lines 36-45). 

As per claims 11-16, they all recite limitations that are addressed in the 
rejection for claim 1 and are rejected in the same rationale as they are rejected in claim 
1 (see rejection above). 



Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Umar Arshad whose telephone number is (703) 305- 
0329. The examiner can normally be reached on Monday - Friday, 9am - 5:30pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Kristine L Kincaid can be reached on (703) 308-0640. The fax phone 
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number for the organization where this application or proceeding is assigned is 703- 
872-9306. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). 
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IN THE UNITED STATES PATENT AND TRADEMARK OFFICE f 35^/ 

it(s): Denis Proulx, et al. 
Title: METHOD AND SYSTEM FOR IP LINK MANAGEMENT 
App.No.: 10/027,821 Filed: 12-19-2001 

Examiner: Arshad, Umar Group An Unit: 2174 

Atty. Dkt. No. 1400.1374890 

Mail Slop Amendment 
Commissioner for Patents 
PO Box 1450 

Alexandria, VA 22313-1450 

RESPONSE 

Dear Sir: 

In response to the Office action of August 27, 2004, please amend the above-identified 
application as follows: 
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In the Specification: 

Please delete the paragraph found on page 5 t line 23, through page 6, line 3, of the specification 
and replace it with the following paragraph; 

The configuration of large networks changes frequently due to addition, removal and/or 
replacement of network devices. To effectively manage large networks such that IP packets are routed 
correctly over the network, the network manager must know when data forwarding network devices 
are added or removed. Gne system used to discover network devices with data forwarding capabilities 
is described in U.S. Patent Application No. 10/029,124. filed December 19, 2001 , titled "Method and 
Apparatus for Automatic Discovery of Network Devices with Data Forwarding Capabilities," assigned 
to the assignee of the present invention and incorporated by reference herein. 

Please delete the paragraph found on page 6, line 19, through page 7, line 2, of the specification 
and replace it with the following paragraph: 

In addition to knowing the identity and physical configuration of the network devices 
themselves, it is also important for the network manager to be able to monitor logical connections 
between network devices. A logical connection exists between network devices when at least one port 
of a first network device is configured so that a message sent out through that port would arrive at a 
known destination (either a network address or a second network device). The destination may be a 
particular port or interface on another network device, a particular IP address, or a particular 
subnetwork. One system used to discover logical links between network devices is described in U.S. 
Patent Application No. 10/029.123, filed December 19, 2001 , titled "Method and Apparatus for 
Automatic Discovery of Logical Links between Network Devices," assigned to the assignee of the 
present invention, and incorporated by reference herein. 

Please delete the paragraph found on page 25, lines 1-14, of the specification and replace it 
with the following paragraph: 

An IP Link can be created via the embodied NMS GUI manually, by SNMP BP Link trap for 
some routers, or by the auto-discovery process (per co-pending Application No. 10/029, 123, "Method 
and Apparatus for Automatic Discovery of Logical Links between Network Devices"). An example of 
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ah IP link provisioning GUI window according to at least one embodiment of the present invention is 
shown in Figure 4, and generally designated example GUI window 400. GUI window 400 typifies 
what a user would see for provisioning a new point-to-point CP link by opening the New->Link->IP 
Link->Point-to-Point configuration form (not illustrated). A window title 405 appears at the top of the 
form to indicate the purpose of the window. The user may select the Link Numbering Type 
(Numbered or Unnumbered) with Link Numbering Type selection button 407. Link Numbering Type 
selection button 407 has "Numbered" selected in the example of Figure 4. The user may also select 
the Link Application (IP Forwarding, IP Forwarding and MPLS, or MPLS) with the Link Application 
selection button 408. In the same manner, the Link Sub layer Interface (ATM, POS, GigEthernet) may 
be selected with the Link Sub Layer Interface selection button 409. 
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REMARKS/ARGUMENTS 



Claims 1-16 are pending in the present application. The Examiner has rejected claims 1-16. 
Applicant respectfully requests reconsideration of pending claims 1-16. 

The Examiner has rejected claims 1-16 under 35 U.S.C. § 103(a) as being unpatentable over 
Hansen (U.S. Patent No. 6,772,204) in view of Lam et al. (U.S. Patent No. 6,381,237). Applicant 
respectfully disagrees. 

Regarding claim 1 , the Examiner acknowledges, "Hansen does not teach creating a new logical 
configuration link when the local interface and next neighbor information is not associated with any of 
the logical configuration links in the logical link database and storing the new logical configuration 
link in the logical link database " but asserts, "Lam teaches creating a new logical configuration link 
when connection information is not associated with any of the logical configuration links in the logical 
link database and storing the new logical configuration link in the logical link database (see Lam, 
column 9, lines 1 -6)." Applicant notes that the Examiner does not allege Lam et al. as teaching 
"creating a new logical configuration link when the local interface and next neighbor information is 
not associated with any of the logical configuration links in the logical link database." Applicant can 
find no mention of a "local interface" or "next neighbor information" in the portion of the Lam et al. 
reference cited by the Examiner. 

Moreover, Applicant notes that the Examiner asserts that Hansen teaches "validating the new 
logical configuration link," "sending the new logical configuration link to the network device," and 
"displaying a graphical representation of the new logical configuration link on a display device," yet 
the Examiner acknowledges, "Hansen does not teach creating a new logical configuration link... " 
Applicant submits that Hansen's acknowledged failure; to disclose "creating a new logical 
configuration link..." impairs the Examiner's argument that Hansen teaches "validating the new 
logical configuration link," "sending the new logical configuration link to the network device," and 
"displaying a graphical representation of the new logical configuration link on a display device." 

Furthermore, regarding "determining whether the local interface and next neighbor information 
is associated with a logical configuration link stored among a plurality of logical configuration links in 
a logical link database," the Examiner cites column 13, lines 40-48, of the Hansen reference, which 
states, "Returning to step 154, if it is determined that both the origination and destination devices or 
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entities have available slots, the method proceeds to step 160, where a connection interface is selected 
for the originating device and on to step 162 where a connection interface is selected for the 
destination device or entity. At both of these steps, the network administrator may select any one of a 
list of available connection interfaces overlayed on the network configuration map 106 by the network 
device configuration tool 10." Applicant can find no mention of "a plurality of logical configuration 
links in a logical link database." Also, Applicant can find no mention of "determining whether the 
local interface and next neighbor information is associated with a logical configuration link...." 

Also, while the Examiner appears to assert that "a connection interface is selected for the 
originating device" (Hansen, column 13* lines 42 and 43) teaches "the local interface" and "a 
connection interface is selected for the destination device or entity" (Hansen, column 1 3, lines 44 and 
45) teaches "next neighbor information," Applicant can find no mention of such features in the portion 
of Hansen (column 12, lines 62-66) cited by the Examiner as allegedly teaching "determining local 
interface and next neighbor information for the network device." Thus, Applicant submits that the 
Examiner's assertions are mutually inconsistent. Accordingly, Applicant submits that the cited 
references fail to leach or suggest the claimed invention as set forth in claim 1. Therefore, Applicant 
submits that claim 1 is in condition for allowance. 

Regarding claim 2, Applicant notes that the Examiner acknowledged that the Hansen reference 
does not teach "creating a new logical configuration link. ..," but asserts that Hansens teaches "wherein 
the step of creating a new logical configuration link further comprises.. .." Moreover, the Examiner 
asserts that Hansen teaches "selecting a link type" in column 13, lines 5-8. However, in column 13, 
lines 12 and 13, Hansen states, "Spec fically, the device has four connection interfaces - two ethernet 
ports and two serial ports." Applicant notes that Hansen refers to "connection interfaces," not "a link 
type." 

Also, the Examiner cites column 14, lines 26-33, of Hansen as teaching "selecting a link 
numbering type for the new logical configuration link." However, column 14, lines 26-33, state, 
"Thus, in this example, the network administrator would be asked whether the serial port should be 
configured, the IP address and mask for the port, the IPX network number, whether the port should be 
configured for frame relay, the type of connector being used for the port, the local data link connection 
identifier (or "DLCl"), the Committed Information Rate (or "OR") and the Excess Information Rate 
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(or "EIR") for the port and whether to use compression." Applicant can find no mention of a "link 
numbering type" in that portion of the Hansen reference. 

Applicant submits, according to the foregoing examples, that the cited references fail to teach 
or suggest the claimed invention as set forth in claim 2. Therefore, Applicant submits that claim 2 is in 
condition for allowance. 

Regarding claim 3, the Examiner asserts that point-to-IP and poim-torsubnet link types are 
"notoriously well known in the art of computer networks" and attempt to combine such assertion with 
two of what Hansen specifically refers to as "connection interfaces" to allegedly yield teaching of 
"selecting the link type from among a group consisting of: point-to-point, point-to-IP, and point-to- 
subnet " Applicant notes that the Examiner does not identify any reference that would disclose the 
recited features. Moreover, Applicant submits that the Examiner's assertions are far to tenuous to 
allegedly render obvious the claimed invention as set forth in claim 3. Thus, Applicant submits that 
claim 3 is in condition for allowance. 

Regarding claim 4, the Examiner acknowledges, "Hansen does not teach selecting the link 
numbering type from a group consisting of: a numbered type and an unnumbered type " However, the 
Examiner asserts, "the unnumbered link numbering type is notoriously well known in the art of 
computer networks." Nonetheless, the Examiner does not identify any reference that would disclose 
the recited features. Thus, Applicant submits that claim 4 is in condition for allowance. 

Regarding claim 5, the Examiner acknowledges, "Hansen does not teach the method of claim 2, 
wherein the step of selecting a link application further comprises the step of: selecting the link 
application from a group consisting of: Internet Protocol Forwarding, Multi-protocol Label Switching 
and Internet Protocol Forwarding, and Multi-Protocol Label Switching " yet the Examiner asserts such 
features are "notoriously well known in the art of computer networks," but does not identify any 
reference that would disclose the recited features. Moreover, the Examiner does not attempt to 
reconcile the teachings of column 14, lines 26-33, of Hansen, which the Examiner asserts as teaching 
"selecting a link application" with respect to claim 2, with the features recited in claim 5. Thus, 
Applicant submits that claim 5 is in condition for allowance. 
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Regarding claim 6, the Examiner acknowledges, "Hansen does not teach the method of claim 2, 
wherein the step of selecting a sub layer interface type further comprises the step of: selecting the sub 
layer interface type from a group consisting of: Packet Over Sonet, Asynchronous Transfer iMode, and 
GigEthernet ," yet the Examiner asserts such features are "notoriously well known in the art of 
computer networks," but does not identify any reference that would disclose the recited features. 
Moreover, the Examiner does not attempt to reconcile the teachings of column 14, lines 26-33, of 
Hansen, which the Examiner asserts as teaching "selecting a link application" with respect to claim 2, 
with the features recited in claim 6. Thus, Applicant submits that claim 6 is in condition for allowance. 

Regarding claim 7, the Examiner acknowledges, "Hansen does not teach the method of claim 1 , 
further comprising the step of: modifying a logical configuration link in the logical link database " but 
asserts that Lam et at. teach such feature in column 10, lines 8-15. Applicant has already noted the 
apparent inconsistency of the teachings of Lam et a!, with the features recited in claim I . In light of 
such apparent inconsistency, Applicant further submits that "update the trail database 50" of Lam et 
at.,. as described in column 1.0, lines 8-15, fails to disclose "modifying a logical configuration link in 
the logical link database," as recited in claim 7, Thus; Applicant submits that claim 7 is in condition 
for allowance. 

Regarding claim 8, the Examiner asserts that Hansen teaches "deleting a logical configuration 
link the logical link database" in column 13, lines 37-39. Applicant has already noted the apparent 
failure of Hansen to disclose the features recited in claim L In light of such apparent failure, Applicant 
further submits that "proposed connection is then deleted" of Hansen, as described in column 13, line 
37, fails to disclose "deleting a logical configuration link in the logical link database," as recited in 
claim 8. For example, Hansen recites a "proposed connection " not "a logical configuration link." 
Moreover, Applicant can find no mention in the cited portion of Hansen of "in the logical link 
database." Thus, Applicant submits that claim 8 is in condition for allowance. 

Regarding claim 9, the Examiner acknowledges, "Hansen does not teach a logical link database 
for storing logical configuration links," but asserts that Lam et al. teach such feature in column I , lines 
56-58. The Examiner further cites column 14, lines 53-61 , of Hansen as disclosing "storing local > 
configuration links." However, Applicant notes the cited portion of Hansen refers to "configuration 
commands contained therein" (column 14, lines 58 and 59), which appears to be inconsistent with the 
Examiner's assertions regarding the "trail database" of Lam et al. (column l t line 57). Thus, Applicant 



-7- 




Application No: 10/027.821 



PATENT 



In conclusion, Applicant has overcome all of the Office's rejections, and early notice of 
allowance to this effect is earnestly solicited. If, for any reason, the Office is unable to allow the 
Application on the next Office Action, and believes a telephone interview would be helpful, the 
Examiner is respectfully requested to contact the undersigned attorney. 

Respectfully submitted, 





Ross D. Snyder, Reg. No. 37,730 
Attorney for Applicant(s) 
Ross D. Snyder & Associates, Inc. 
1 15 Wild Basin Road, Suite 107 
Austin, Texas 78746 
(512) 347-9223 (phone) 
(512) 347-9224 (fax) 
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DETAILED ACTION 



This action is responsive to communications: Amendment, filed on 2/2/05. 



Claims 1-16 are pending in this application. Claims 1 and 9 are independent claims. 



Claim Rejections - 35 USC § 102 



The following is a quotation of the appropriate paragraphs of 35 ILS.C 102 that form the 
basts for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(e) the invention was described in (1) an application for patent, published under section 1 22(b), by another filed 
in the United States before the invention by the applicant for patent or (2) a patent granted on an application for 
patent by another filed in the United States before the invention by the applicant for patent except thai an 
international application filed under the treaty defined in. section 35 1(a) shall have the effects for purposes of this 
subsection of an application filed in the United States only if the international application designated the United 
States and was published under Article 21(2) of such treaty in the English language. 

Claims 9 and 10 are rejected under 35 U S.C. 102(e) as being anticipated by Hansen, U.S. 
Patent No. 6,772,204. 

As per claim 9, Hansen teaches an apparatus for provisioning logical configuration links 



lines 40 - 48, It is inherent there is a database for storing a list of available connection 
interface overlayed on the network configuration map). 

storing logical configuration links (see Hansen^ column 14, lines 53 - 61); a processing 
system for accessing the stored logical configuration links; and a display device coupled to the 
processing system for displaying a graphical user interface form comprising a graphical 
representation of a logical configuration link (see Hansen, column 3, lines 12-20 and column 5, 
lines 19 - 26). Hansen does not teach Lam teaches a logical link database for storing logical 



comprising: 



a logical link database for storing logical configuration links, (see Hansen, column 13, 
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configuration links (see Lam, column I, lines 56 - 58). It would have been obvious to one of 
ordinary skill in the art at the time of the invention to incorporate the method of Lam with the 
method of Hansen in order to provide a resource of data describing connections in a network, 

As per claim 10, which is dependent on claim 9, Hansen teaches the method of claim 9 
(see rejection above). Hansen further teaches the apparatus of claim 9 wherein the display device 
provides an ability to select a network device having at least one network interface through the 
graphical user interface form (see Hansen, column 12, lines 36 - 45). 

Claim Rejections - 35 VSC § 103 
The following is a quotation of 35 U S.O. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or 
described as set forth in section 1 02 of this title, if the differences between the subject matter 
sought to be patented and the prior art are such that the subject matter as a whole would have 
been obvious at the time the invention was made to a person having ordinary skill in the art to 
which said subject matter pertains. Patentability shall not be negatived by the manner in which 
. the invention was made. 

Claims 1-8, and 11-16 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Hansen, U.S. Patent No. 6,772,204 in view of Lam et al., U.S. Patent No. 6,381 ,237. 
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As per claim 1, Hansen teaches a network administration method for provisioning logical 
configuration links for at least two network devices through a dedicated graphical user interface 
form, the method comprising: selecting a network device having at least one network interface 
through the dedicated graphical user interface form (see Hansen, column 1 2, lines 36- 45); 
determining local interface and next neighbor information for the network device (see Hansen, 
column 12, lines 62-66); 

determining whether the local interface and next neighbor information is associated with 
a logical configuration link stored among a plurality of logical configuration links in a logical 
link database (see Hansen, column 13, lines 40 - 48); 

validating the new logical configuration link (see Hansen, column 13, lines 25 33); 

sending the new logical configuration link to the network device (see Hansen, column 15, 
lines 4 -13); and 

displaying a graphical representation of the new logical configuration link on a display 
device (see Hansen, column 13, lines 52 - 56). 

Hansen does not teach creating a new logical configuration link when the local interface 
and next neighbor information is not associated with any of the logical configuration links in the 
logical link catabase and storing the new logical configuration link in the logical link database. 
Lam teaches creating a new logical configuration link when connection information is not 
associated with any of the logical configuration links in the logical link database and storing the 
new logical configuration link in the logical link database (see Lam, column 9, lines 1 - 6). 
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It would have been obvious to one of ordinary skill in the art at the time of the invention 
to incorporate the method of Lam with the method of Hansen in order to provide an up-to-date 
interface to the user. 

As per claim 2, which is deperdent on claim 1, Hansen and Lam teach the method of 
claim 1 (see rejection above). Hansen further teaches the method of claim 1, 

wherein the step of creating a new logical configuration link further comprises t he steps 
of: selecting a link type (see Hansen, column 1.3, lines 5 - 8); selecting a link numbering type for 
the new logical configuration link (see Hansen, column 14, lines 26 - 33); selecting a link 
application for the new logical configuration link (see Hansen, column 14, lines 26 - 33); 
selecting a sub layer interface type for the new logical configuration link (see Hansen, column 1 
4, lines 26 - 33); creating a first endpoint for the new logical configuration link; and creating a 
second endpoint for the new logical. configuration link (see Hansen, column 12, lines 36 - 45), 

As per claim 3, which is dependent on claim 2, Hansen and Lam teach the method of 
claim 2 (see rejection above). Hansen further teaches the method of claim 2, wherein the step of 
selecting the link type further comprises the step of selecting a point-to-point link type (see 
Hansen, column 13, lines 5 - 8). However, Hansen does not selecting the link type from among a 
group consisting of: point-to-point, point-to-IP, and point-to-subnet. The examiner takes official 
notice that point-to-IP and point-to-subnet link types are notoriously well known in the art of 
computer networks. It would have been obvious to one of ordinary skill in the art at the time of 
the invention to incorporate point-to-IP and point-to-subnet link types with the method of 
Hansen in order to provide access to well established configurations. 
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As per claim 4, which is dependent on claim 2, Hansen and Lam teach the method of 
claim 2 (see rejection above). Hansen further teaches the method of claim 2, wherein the step of 
selecting a link numbering type further comprises the step of selecting a numbered link 
numbering type (see Hanson, column 14, lines 26 - 28). 

Hansen does not teach selecting the link numbering type from a group consisting of: a 
numbered type and an unnumbered type. The examiner takes official notice that the unnumbered 
link numbering type is notoriously well known in the art of computer networks. It would have 
been obvious to one of ordinary skill in the art at the time of the invention to incorporate the 
unnumbered link numbering type with the method of Hansen in order to provide access to well 
established configurations. 

As per claim 5, which is dependent on claim 2, Hansen and Lam teach the method of 
claim 2 (see rejection above). Hansen does not teach the method of claim 2, wherein the step of 
selecting a link application further comprises the step of: selecting the link application from a 
group consisting of: Internet Protocol Forwarding, Multiprotocol Label Switching and Internet 
Protocol Forwarding, and Multi-Protocol Label Switching. 

The examiner takes official notice that Internet Protocol Forwarding, Multi-protocol 
Label Switching and Internet Protocol Forwarding, and Multi-Protocol Label Switching are 
notoriously well known in the art of computer networks. It would have been obvious to one of 
ordinary skill in the art at the time of the invention to incorporate Internet Protocol Forwarding, 
Multi-protocol Label Switching and Internet Protocol Forwarding, and Multi-Protocol Label 
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Switching with the method of Hansen in order to provide access to well established 
configurations. 

As per claim 6, which is dependent on claim 2, Hansen and Lam teach the method of 
claim 2 (see rejection above). Hansen does not teach the method of claim 2, wherein the step of 
selecting a sub layer interface type further comprises the step of: 

selecting the sub layer interface type from a group consisting of: Packet Over Sonet, 
Asynchronous Transfer Mode, and GigEthemet. 

The examiner takes official notice that Packet Over Sonet, Asynchronous Transfer Mode, 
and GigEthemet are notoriously well known in the art of computer networks. It would have been 
obvious to one of ordinary skill in the art at the time of the invention to incorporate Packet Over 
Sonet, Asynchronous Transfer Mode, and GigEthemet with the method of Hansen in order to 
provide access to well established configurations. 

As per claim 7, which is dependent on claim I , Hansen and Lam teach the method of 
claim 1 (see rejection above). Hansen does not teach the method of claim 1, further comprising 
the step of: modifying a logical configuration link in the logical link database. 

Lam teaches modifying a logical configuration link in the logical link database (see Lam, 
column 10, lines 8 - 15). It would have been obvious to one of ordinary skill in (he art at the time 
of the invention lo incorporate the method of Lam with the method of Hansen in order to 
provide an up-to-date interface to the user. 
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As per claim 8, which is dependent on claim 1, Hansen and Lam teach the method of 
claim I (see rejection above). Hansen further teaches the method of claim 1, further comprising 
the step of: deleting a logical configuration link in the logical link database (see Hansen, column 
13, lines 37 -39) 

As per claim 11, which is dependent on claim 9, Hansen teaches the method of claim 9. 
Hansen fails to teach wherein the processing system determine local interface and next neighbor 
information for the network device. 

Lam teaches creating a new logical configuration link when connection information is not 
associated with any of the logical configuration links in the logical link database and storing the 
new logical configuration link in the logical link database (see Lam, column 9, lines 1 - 6). 

it would have been obvious to one of ordinary skill in the art at the time of the invention 
to incorporate the method of Lam with the method of Hansen in order to provide an up-to-date 
interface to the user. 

As per claim 12-16, they all recite limitation that are addressed in the rejection for claim 
1-8 and are rejected in the same rationale as they rejected in claim 1-8. Supra. 

Response to Argument 
Applicant's arguments filed on 2/2/05 have been fully considered but they are not 
persuasive. 

Applicant's arguments focused on the following: 
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a) Lam fails to teach "creating a new logical configuration link when the local interface 
and next neighbor information is not associated wit any of the logical configuration links in the 
logical link database." 

a) Examiner disagrees. Lam teaches creating a subnet network connection or a logical 
configuration link when it is missing from the trail database, (col. 8, lines 52-64) The missing 
subnet network connection is the connection between the local interface and next neighbor 
information because during the construction of the connection, the learning trail is in fact 
creating a connection point with the neighboring subnetwork, (col. 9 ; lines 20-53) 

b) Hansen could not validate the new logical configuration link. 

b) Examiner disagrees. Although Hansen fails to teach creating a new logical 
configuration link, Hansen is not prevented from validate the logical configuration link once the 
linked is created using Lam's method. 

c) Hansen fails to teach a plurality of logical configuration links in a logical link 
database. 

c) Examiner disagrees. The examiner does not agree for the following reasons: 
During patent examination, the pending claims must be "given >their< broadest 
reasonable interpretation consistent with the specification. M > In re Hyatt, 21 1 F.3d 1367, 1372, 
54 USPQ2d 1664, 1667 (Fed. Cir. 2000). Although the claims are interpreted in light of the 
specification, limitations from the specification are not read into the claims. See In re Van 
Geims % 988 F.2d 1 181, 26 USPQ2d 1057 (Fed. Cir. 1993). 

Applicant always has the opportunity to amend the claims during prosecution, and broad 
interpretation by the examiner reduces the possibility that the claim, once issued, will be 
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Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system* contact the Electronic Business Center (EBC) at 866-2 17-9 1 97 (toll-free). 
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In the Specification: 

Please delete the paragraph found on page 5, line 23, through page 6, line 3, of the 
specification and replace it with the following paragraph: 

The configuration of large networks changes frequently due to addition, removal and/or 
5 replacement of network devices. To effectively manage large networks such that IP packets are 
routed correctly over the network, the network manager must know when data forwarding 
network devices are added or removed. One system used to discover network devices with data 

forwarding capabilities is described in U.S. Patent Application No. [[ ]] 10/029,124, 

ftled December 19. 200 1 , titled "Method and Apparatus for Automatic Discovery of Network 
10 Devices with Data Forwarding Capabilities," assigned to the assignee of the present invention 
and incorporated by reference herein. 

Please delete the paragraph found on page 6, line 19, through page 7, line 2, of the 
specification and replace it with the following paragraph: 



15 themselves, it is also important for the network manager to be able to monitor logical 

connections between network devices. A logical connection exists between network devices 
when at least one port of a first network device is configured so that a message sent out through 
that port would arrive at a known destination (either a network address or a second network 
device). The destination may be a particular port or interface on another network device, a 

20 particular IP address, or a particular subnetwork. One system used to discover logical links 

between network devices is described in U.S. Patent Application No. [( ]] 

10/029 A 23, filed December 19. 200 L titled "Method and Apparatus for Automatic Discovery of 
Logical Links between Net work Devices " assigned to the assignee of (he present invention, and 
incorporated by reference herein, 

25 Please delete the paragraph found on page 25, lines 1.-14, of the specification and replace 

it with the following paragraph: 



In addition to knowing the identity and physical configuration of the network devices 
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An IP Link can be created via the embodied NMS GUI manually, by SNMP IP Link trap 
for some routers, or by the auto-discovery process (per co-pending Application No. 



between Network Devices"). An example of an IP link provisioning GUI window according to 
at least one embodiment of the present invention is; shown in Figure 4, and general! y designated 
example GUI window 400. GUI window 400 typifies what a user would see for provisioning a 
new point-to-point IP link by opening the New->Link->IP Link->Point-to~Point configuration 
form (not illustrated). A window title 405 appears at the top of the form to indicate the purpose 
of the window. The user may select the Link Numbering Type (Numbered or Unnumbered) with 
Link Numbering Type selection button 407. Link Numbering Type selection button 407 has 
"Numbered" selected in the example of Figure 4. The user may also select the Link Application 
(IP Forwarding, IP Forwarding and MPLS, or MPLS) with the Link Application selection button 
408. In the same manner, the Link Sub layer Interface (ATM, POS, GigEthcrnct) may be 
selected with the Link Sub Layer Interface selection button 409. 



[L 



J] 1 0/029. 123 > "Method and Apparatus for Automatic Discovery of Logical Links 
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REMARKS/ARGUMENTS 

Claims 1 -16 are pending in the application. The Examiner has rejected claims 1-16. Applicant 
respectfully requests reconsideration of pending claims 1-16. 

In response to the previous Office action, Applicant submitted amendments to the specification 
to include identifying information (e.g., application numbers, filing date) of co-pending applications 
referenced in the specification. However, Applicant notes certain indications (e.g., underlining, double 
square brackets) appear not to have printed properly. Thus, Applicant resubmits the previously 
submitted amendments to the specification in a form that includes such indications. Applicant submits 
no new matter has been added and the omission of the indications in the previous response was 
inadvertent. 

The Examiner has rejected claims 9 and 10 under 35 U.S.C. § 102(e) as being anticipated by 
Hansen, U.S. Patent No. 6,772,204 Applicant respectfully disagrees. 

Regarding claim 9, Applicant submits the cited reference fails to disclose the features of claim 
9. For example, while the Examiner previously acknowledged, "Hansen does not teach a logical link 
database for storing logical configuration links " the Examiner now alleges Hansen teaches such, citing 
column 13, lines 40-48, and stating, "It is inherent there is a database for storing a list of available 
connection interface overJayed on the network configuration map." While the Examiner asserts a 
rejection based on inherency, Applicant submits that the teachings of the cited reference fail to 
establish inherency in accordance with existing law. For example, Applicant submits that the 
Examiner has failed to establish that the public gained the benefit of the subject matter recited in claim 
9 from the teachings of the cited reference. Schering Corp. v. Geneva Pharmaceuticals, 339 F.3d 1373 
(Fed. Cir. 2003). As another example, Applicant submits that the Examiner has failed to establish that 
the subject matter recited in claim 9 is present in the teachings of the cited reference. Mentor v. 
Medical Device Alliance, 244 F.3d 1365 (Fed. Cir. 2001); Scaltech v. RetecJTetra. 178 F.3d 1378 (Fed. 
Cir. 1999). Thus, Applicant submits that the subject matter recited in claim 9 cannot be considered to 
be inherent in the teachings of the cited reference. Accordingly, Applicant submits the Examiner has 
failed to satisfy the burden of proof required for asserting a rejection based on inherency. Therefore, 
Applicant submits that the Examiner has not shown claim 9 to be anticipated by the cited reference. 
Consequently, Applicant submits claim 9 is in condition for allowance. 
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Regarding claim 10, Applicant submits the cited reference fails to disclose the features of claim 
10. For example, claim 10 depends from claim 9, and Applicant has presented reasons for the 
allowability of claim 9. Thus, Applicant submits claim 10 is also in condition for allowance. 

The Examiner has rejected claims 1-8 and 1 1-16 under 35 U.S.C § 103(a) as being 
unpatentable over Hansen, U.S. Patent No. 6,772,204 in view of Lam et aL, U.S. Patent No. 6,381,237. 
Applicant respectfully disagrees. 

Regarding claim 1 , the Examiner acknowledges, "Hansen does not teach creating a new logical 
configuration link when the local interface and next neighbor information is not associated with any of 
the logical configuration links in the logical link database and storing the new logical configuration 
link in the logical link database," but alleges that Lam does, citing column 9, lines 1-6, of Lam. In the 
Examiner's Response to Arguments, the Examiner alleges, "Lam teaches creating a subnet network 
connection or a logical configuration link when it is missing from the trail database, (col. 8, lines 52- 
64) The missing subnet network connection is the connection between the local interface and next 
neighbor information because during the construction of the connection, the learning trail is in fact 
creating a connection point with the neighboring sub-network, (col. 9, lines 20-53)." Applicant 
respectfully disagrees. 

Applicant submits the cited portions of Hansen and Lam, taken either alone or in combination, 
fail to render obvious the features of claim 1 . For example, Applicant submits the cited portions of 
Hansen and Lam do not render obvious "creating a new logical configuration link when the local 
interface arid next neighbor information is not associated with any of the logical configuration links in 
the logical Jink database " In column 8, lines 52-53, of Lam, as cited by the Examiner, Lam states, in 
part, "...when an SNC is found only in the network 10 and missing from the trail database 50,...." In 
column 9, line 38, of Lam, as cited by the Examiner, Lam states, "Finally, the trail learner 48 creates a 
link connection 92...*" As apparently depicted in Fig. 10 of Lam, Applicant submits SNC's, such as 
SNC1 and SNC2 appear to be distinct from link connection 92. Thus, Applicant submits Lam appears 
to fail to provide teachings consistent with "determining whether the local interface and next neighbor 
information is associated with a logical configuration link stored among a plurality of logical 
configuration links in a logical link database; creating a new logical configuration link when ihe local 
interface and next neighbor information is not associated with any of the logical configuration links in 
the logical link database; [and] storing the new logical configuration link in the logical link database." 
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As one example, Applicant submits Lam appears to teach creating something different from that which 
it stores. As another example, Applicant notes, based on Fig. 10 of Lam, SNGs of Lam appear not to 
enable "determining whether the local interface and next neighbor information is associated with a 
logical configuration link stored among the plurality of logical configuration links in a logical link 
database/ 1 Thus, Applicant submits the teachings of the cited portions of the Hansen and Lam 
references cannot be combined to yield the features set forth in claim I . Moreover, Applicant submits 
the apparent inconsistency of the teachings of the cited portions of Hansen and Lam vis a vis the 
features of claim I impair the Examiner's alleged motivation to combine the alleged teachings of the 
cited portions of the Hansen and Lam references. 

Also, as noted previously, Applicant notes that the Examiner asserts that Hansen teaches 
"validating the new logical configuration link," "sending the new logical configuration link to the 
network device," and "displaying a graphical representation of the new logical configuration link on a 
display device," yet the Examiner acknowledges, "Hansen docs not teach creating a new logical 
configuration link. . . ." Applicant submits that Hansen's acknowledged failure to disclose "creating a 
new logical configuration link..." impairs the Examiner's argument that Hansen teaches "validating 
the new logical configuration link," "sending the new logical configuration link to the network 
device," and "displaying a graphical representation of the new logical configuration link on a display 
device." While the Examiner states, in the Examiner's Response to Arguments, "Although Hansen 
fails to teach creating a new logical configuration link, Hansen is not prevented from validate the 
logical configuration link one the linked is created using Lam's method," Applicant notes the apparent 
inconsistency of the teachings of the cited portions of the Hansen and Lam references, as discussed 
above, and the apparent tenuousness of alleging that a reference teaches validating a new logical 
configuration link while admitting that the same reference fails to teach creating the new logical 
configuration link. 

In the Examiner's Response to Arguments, the Examiner also states, "Hansen teaches this 
limitation because "a list of available connection interface overlayed on the network configuration 
map" is a plurality of configuration links in a logical link database," citing column 13, lines 40-48. 
Applicant notes claim I recites, "determining whether the local interface and next neighbor 
information is associated with a logical configuration link stored among a plurality of logical 
configuration links in a logical link database." Applicant submits the Examiner's alleged teaching in 
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Hansen of "a plurality of configuration links in a logical link database" blurs any distinction of what 
the Examiner would allege to be "the local interface" and "the plurality of logical configuration links 
in a logical link database." Thus, Applicant submits the Examiner's interpretation of the teachings of 
the Hansen reference cannot be reconciled with the features recited in claim I. 

In the Examiner's Response to Arguments, the Examiner also states, "The examiner interprets 
determining connectivity in a network to be the same as determining local interface and neighbor 
information for the network device " citing column 10, lines 62-66, which state, in part, "The trail 
explorer... may not only explore connectivity...." Applicant submits a mere reference to "explore 
connectivity" fails to disclose the features "determining local interface and next neighbor information 
for the network device," as the cited portion does not appear to disclose "local interface," "next 
neighbor information," or "network device." For the foregoing reasons, Applicant submits claim I is 
in condition for allowance. 

Regarding claim 2, the Examiner appears to allege the same teachings based on the same 
portions of the same references as in the previous Office action. Applicant reiterates Applicant's 
previous arguments for the allowability of claim 2. Thus, Applicant submits claim 2 is in condition for 
allowance. 

Regarding claim 3, the Examiner acknowledges, "Hansen does not selecting the link type from 
among a group consisting of: point-to-point, point-to-IP, and point-to-subnet " The Examiner asserts 
"official notice that point-to-IP and point-to-subnet link types are notoriously well known in the art of 
computer networks." Applicant respectfully disagrees and traverses the Examiner's alleged official 
notice. Applicant submits the Examiner has not presented evidence that such features would have been 
well known in the art at the time the invention was made. Thus, Applicant submits claim 3 is in 
condition for allowance, 

Regarding claim 4, the Examiner acknowledges, "Hansen does not teach selecting the link 
numbering type from a group consisting of: a numbered type and an unnumbered type." The 
Examiner asserts "official notice that the unnumbered link numbering type is notoriously well known 
in the art of computer networks." Applicant respectfully disagrees and traverses the Examiner's 
alleged official notice. Applicant submits the Examiner has not presented evidence that such feature 
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would have been well known in the art at the time the invention was made. Thus, Applicant submits 
claim 4 is in condition for allowance. 

Regarding claim 5, the Examiner acknowledges, "Hansen does not teach the method of claim 2, 
wherein the step of selecting a link application further comprises the step of: selecting the link 
application from a group consisting of: Internet Protocol Forwarding, Multiprotocol Label Switching 
and Internet Protocol Forwarding, and Multi-Protocol Label Switching." The Examiner asserts 
"official notice that Internet Protocol Forwarding, Multiprotocol Label Switching and Internet Protocol 
Forwarding, and Multi-Protocol Label Switching are notoriously well known in the art of computer 
networks." Applicant respectfully disagrees and traverses the Examinees alleged official notice. 
Applicant submits the Examiner has not presented evidence that such features would have been well 
known in the art at the time the invention was made. Thus, Applicant submits claim 5 is in condition 
for allowance. 

Regarding claim 6, the Examiner acknowledges, "Hansen does not teach the method of claim 2, 
wherein the step of selecting a sub layer interface type further comprises the step of: selecting the sub 
layer interface type from a group consisting of: Packet Over Sonet, Asynchronous Transfer Mode, and 
GigEthernet." The Examiner asserts "official notice that Packet Over Sonet, Asynchronous Transfer 
Mode* and GigEthernet are notoriously well known in the art of computer networks." Applicant 
respectfully disagrees and traverses the Examinees alleged official notice. Applicant submits the 
Examiner has not presented evidence that such features would have been well known in the art at the 
time the invention was made. Thus, Applicant submits claim 6 is in condition for allowance. 

Regarding claim 7, the Examiner acknowledges, "Hansen does not teach the method of claim I, 
further comprising the step of: modifying a logical configuration link in the logical link database," but 
asserts that Lam does, citing column 10, lines 8- 15, of Lam. Applicant has already noted the apparent 
inconsistency of the teachings of Lam et a), with the features recited in claim I, from which claim 7 
depends. In light of such apparent inconsistency. Applicant further submits that "update the trail 
database 50" of Lam et ah, as described in column 10, lines 8- 15, fails to disclose "modifying a logical 
configuration link in the logical link database," as recited in claim 7. Thus, Applicant submits that 
claim 7 is in condition for allowance. 
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Regarding claim 8, the Examiner asserts that Hansen teaches "deleting a logical configuration 
link the logical link database" in column 13, lines 37-39. Applicant has already noted the apparent 
failure of Hansen to disclose the features recited in claim I , from which claim 8 depends. In light of 
such apparent failure, Applicant further submits that "proposed connection is then deleted" of Hansen, 
as described in column 13, line 37, fails to disclose "deleting a logical configuration link in the logical 
link database" as recited in claim 8. For example, Hansen recites a "proposed connection," not "a 
logical configuration link." Moreover, Applicant can find no mention in the cited portion of Hansen of 
"in the logical link database " Thus, Applicant submits that claim 8 is in condition for allowance. 

Regarding claim I I , the Examiner acknowledges, "Hansen fails to teach wherein the 
processing system determine local interface and next neighbor information for the network device." 
The Examiner asserts, "Lam teaches creating a new logical configuration link when connection 
information is not associated with any of the logical configuration links in the logical link database and 
storing the new logical configuration link in the logical link database," citing column 9, lines 1-6, of 
Lam. However, Applicant notes the Examiner does not appear to allege that Lam teaches "wherein the 
processing system determines local interface and next neighbor information for the network device." 
Thus, Applicant submits the Examiner has not presented any rationale to support rejection of claim 1 I , 
andi even if an attempt were made to combine the teachings of Hansen and Lam, such attempt would 
not yield the features recited in claim 1 1. Therefore, Applicant submits claim 11 is in condition for 
allowance. 

Regarding claims 12-16, the Examiner states, "they all recite limitation that are addressed in the 
rejection for claim 1 -8 and are rejected in the same rationale as they rejected in claim I -8." Applicant 
has presented reasons for the allowability of claims 1-8. To whatever extent the Examiner relies on the 
same rationale for rejecting claims 12-16, Applicant reiterates Applicant's arguments presented above 
regarding such rationale. Thus, Applicant submits claims 12-16 are in condition for allowance. 
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in conclusion. Applicant has overcome all of the Office's rejections, and early notice of 
allowance to this effect is earnestly solicited. If, for any reason, the Office is unable to allow the 
Application on the next Office Action, and believes a telephone interview would be helpful, the 
Examiner is respectfully requested to contact the undersigned attorney. 

Respectfully submitted, 




Attorney for Applicant(s) 

Ross D, Snyder & Associates, Inc. 

PO Box 164075 

Austin, Texas 78716-4075 

(512) 347-9223 (phone) 

(512) 347-9224 (fax) 
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amendment or an amendment filed in response to a Quayle action. 

Failure to timely respond to this notice will result in: 
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Non-entry of the amendment if the non-compliant amendment is a preliminary amendment or supplemental 
amendment. _ 

£~7l <*7* 4?<ST\ 




U.S. Patent and Trade maTk Office " Part of Paper No. 2006021 7 




Pmrmtn Rrfliff 'm flffl til 19», nil a 



TRANSMITTAL 
FORM 



6$ used tor eg coffgggantdteggo after inSial Ming) 



Total Number of Page* *n This Sutnusston , 19 



PTCVSB/21 

Approved for use ptough 07/31/200B. OM8 0651-0031 
U.S. Patent and Trademark Office; rf.S. DEPARTMENT OF COMMERCE 
am rpoufrPd m Tf<««nH-fft » m1t|jcTfen of information unV»^ H rifrnlftva a Y 




Applicalion Number 



Filing Oate 



First Named Inventor 



Art Unit 



Examiner Name 



Attorney Docket Number 



10027.621 



I2-19-2001 



Denis Prout*. ot al 



Ke. Pong 



ENCLOSURES (Check alt that apply) 



0 



Fee Transmittal Form 
0 Fee Attached 



□ 
□ 

□ 

□ 



ent/Repty 
CD After Final 
□ Affidatfis/declarationfs) 
Extension of Time Request 
Express Abandonment Request 
Information Disclosure Statement 



Certified Copy of Priority 
Document(s) 

Reply to Missing Parts/ 
Incomplete Application 

□ Reply to Missing Parts 
under 37 CFR 1.52 or 1.53 



Drawing's) 
□ Ucensing-reiated Papers 

□ 
□ 
□ 
□ 
□ 
□ 



Petition 

Petition to Convert to a 
Provisional Application 
Power of Attorney. Revocation 
Change of Correspondence Address 

Terminal Disclaimer 



Request for Refund 

CD, Number of CD(s) 

| 1 Landscape Table on CD 



I Remarks I 



After Allowance Communication to TC 

Appeal Communication to Board 
of Appeals and Interferences 

Appeal Communication to TC 
(Appeal Notice, Brief. Reply Brief) 



□ 
□ 

□ 
□ 

n Status Letler 

0 Other Enclosure(s) (please Identify 
below): 
Return Receipt Postcard 



Proprietary Information 



SIGNATURE OF APPLICANT, ATTORNEY, OR AGENT 



Firm Name 



Ross D. Snyder & Associates, Inc. 



Signature 



Printed name 



Ross D. Snydei 



Date 



Reg. No. j 37730 



CERTIFICATE OF TRANSMISSION/MAILING 



i hereby certify that this correspondence ts being facsimile transmitted to the USPTO or deposited with the United States Postal Service with 
sufficient postage as first doss mail in an envelope addressed to: Commissioner for Patents, P.O. Box 1450, Alexandria, VA 22313-1450 on 
the date shown below: 



/^^L»-~~?^7 ^^^^^^ 



\Typed 



or printed name 



—37 

Ross D. Snyder, Reg. No. 37,730 



Date 



O7-1S-20O6 



This coflection of Information is required by 37 CFR 1 .5. The information is required to obaln or retain a benefit by the pubic which is to file (and by ihe USPTO to 
process) an appficauon. Confidentiality is governed by 35 U.S.C. 122 ond 37 CFR 1.11 andt.H. This coUection is estimated to 2 hours to compter. lnctud.no 
gathering, preparing, and submitting the completed application form to the USPTO. Time will vary depending upon the Individual case. Any cwnmcntt on tfte 
amount of time you require to compteto this form and/Or suggestions tor reducing this burden. shouW ^J^^,S!tS^JS t 1!S^^^^'Mi^T^ 
Trademark Office, U.S. Department of Commerce, P.O. Box 1450. Alexandria, VA 22313-1450. DO NOT SEND FEES OR COMPUETEO FORMS TO THIS 
ADDRESS. SEND TO: Commissioner for Patents, P.O. Box 1450, Alexandria. VA 22313-1450. 

tf you need assistance In completing the torn, caff 1-80O-PTO-9 199 and select option 2. 



PTO/SB/22 (12-04) 
Approved for use through 0W3 1/2006. OM8 0831-0031 
U.S. Patent end Trademark Office; U.S. DE PARMENT OF COMMERCE 
t tho paperwork Reduction Ad of 199S. no persons aro required io respond w> a cetJection of JntorrrwUon unless if displays a valid OM8 control number. 



ION FOR EXTENSION OF TIME UNDER 37 CFR 1.136(a) 
FY 2005 

(Fops pursuant to tho Consolidated Appropriations Act. 200S (H.R. 4816).) 



Docket Number (Optional) 

1400.1374890 



Application Number 10/027,821 



Filed 12-19-2001 



For METHOD AND SYSTEM FOR IP LINK MANAGEMENT 

Art Unit 2174 [Examiner Ke, Peng 



This is a request under the provisions of 37 CFR 1 .136(a) to extend the period for filing a reply in the above identified 
application. 

The requested extension and fee are as follows (check time period desired and enter the appropriate fee below): 







Fee 


Small Er)% Fee 




□ 


One month (37 CFR 1.17(a)(1)) 


$120 


S60 


$ 


□ 


Two months (37 CFR 1 17(a)(2)) 


$450 


$225 


S 


m 


Three months (37 CFR 1.17(a)(3)) 


$1020 


$510 


$ 


□ 


Four months (37 CFR 1.1 7(a)(4)) 


$1590 


$795 


s 


□ 


Five months (37 CFR 1.17(a)(5)) 


$2160 


$1080 


s 



1,020.00 



| — | Applicant claims small entity status. See 37 CFR 1 21. 

jX] A check in the amount of the fee is enclosed. 

PI Payment by credit card. Form PTO-2038 ts attached. 

£] The Director has already been authorized to charge fees in this application to a Deposit Account. 

|y| The Director is hereby authorized to charge any fees which may be required, or credit any overpayment, to 
^ Deposit Account Number 50-1566 . I have enclosed a duplicate copy of this sheet. 

WARNING: Information on this form may become public. Credit card Information should not be Included on this form. 
Provide credit card Information and authorliatlon on PTO-2038. 

I am the Q applicant/inventor. 

□ assignee of record of the entire Interest. See 37 CFR 3.71 . 
Statement under 37 CFR 3.73(b) is enclosed (Form PTO/SB/96). 

[X] attorney or agent of record. Registration Number 37,730, 

□ attorney or agent under 37 CFR 1,34. 
Registration number If acting j^der 37 CFR 1 .34 . 

07-16-2006 




Signature r Dale 



Ross D. Snyder, Reg. No. 37,730 (51 2) 347-9223 

TypedorpHntedname « ™» ^^1^ t ™ 

NOTE: Signature* cf aH the Inventors or assignees of record of the entire Interest or their representaUv«{s) are required. Submit mixliple forms if more than one 
signature Is required, see below. 

[""1 Total of forms arc submitted. 



This ccflectjon of inlormation is required by 37 CFR 1.1 36(a). The formation is required to obtain or retain a benefit by the public which is to file {and by the 
USPTO » process) an application, Confidenfiafiry I* governed by 35 USX. 122 end 37 CFR 1.11 and 1.14; This collection Is estimated to take $ minutes to 
comoteie. Intiu&ng gathering, preparing, and submitting the compteed application form to the USPTO. Time wil vary depending upon tho individual case. Any 
comments on the amouni of time you require to complete this form and/or suggestions for reducing this burden, should be sent to the Chief Information Officer, 
U.S. Patent and Trademark Office. U.$; Oej»rtmcntof Commerce. P.O. Sox 1450. Alexandria. VA 22313-1450. DO NOT SEND FEES OR COMPLETED 
FORMS TO THIS ADDRESS. SEND TO: Cornmlsstoner for Patent*. P.O. Box 1430. Alexandria. VA 22313-1450. 

tt you need eavsfanc* in competing the torn, call 1-*004>TO9M and satoct option I 



IG7 



PTO/S8/17 (12«0<iv2) 
Approved for use through 07/31/2006. OMB 0651-0032 
U.S. Patent and Trademark Office; U S. DEPARTMENT Of COMMERCE 



» fQ 0J Klsua/tf fo tfto Co/uoWa Jo d AoDfOoneticns Act 2005 (HA. 48 f el 

JfEE TRANSMITTAL 

8^ For FY 2005 


Complete if Known 


Application Number 


10/027,621 


filing Oato 


12-19-2001 


First Named Inventor 


Denis Proulx. etal. 


Examiner Name 


Ke. Peng 


O Applicant claims small entity status. See 37 CFR 1.27 


Art Unit 


2174 


JOTAL AMOUNT OF PAYMENT ($) 1 ,020.00 


Attorney Docket No. 


1400.1374890 ^ 



METHOD OF PAYMENT (check all that appty) 



Check [___] Credit Card ^Moncy Order C^None CUother (please identify): 

I * I Deposit Account Deposit Ao^t Numbe r 50- 1 566 n*pr>*h Arcmmt Name: ROSS D. SfW<ter & ASSOC, 



For toe above-Identified deposit account the Director is hereby authorized to: (check ail that apply) 
[^Charge fee(s) indicated below £j Charge fee(s) indicated below, except for the filing fee 

0 Charge any additional fee(s) or underpayments of fee(s) f?l credit any overpayments 
under 37 CFR 1. 16 and 1.17 L "" J _.__.,_ _. ., „, 
WARNING: Information on this form may become public. Credit card Information should not bo Indudad on thle form. Provide erodlt card 
Information and euthorfcatlen on PTO-203B. ______ 



FEE CALCULATION 



i. BASIC FILING, SEARCH, AND EXAMINATION FEES 



Application Type 

Utility 

Design 

Plant 

Reissue 



FILING FEES 

Small Entity 
Fee IS! 
300 150 



SEARCH FEES 

Small Entity 

£saiU EejLta 

500 250 



200 
200 
300 



100 
100 
150 



100 
300 
500 
0 



50 
150 
250 
0 



EXAMINATION FEES 
Small Entity 
ESSLiii EseJD 
200 100 
130 65 ' 
160 80 
600 300 



Fees Paldtf) 



Provisional 200 100 

2. EXCESS CLAIM FEES 
Fee Description 

Each claim over 20 (including Reissues) 
Each independent claim over 3 (including Reissues) 
Multiple dependent claims 
Total Claims Extra, Claims, Fee (ft Fee Paid (S) 
-20'orHP* x ■ _ 



Small Entity 
Fooffl 
25 
100 



Essii) 
50 
200 

360 180 
Multiple Dependent, Claims 
Fee (Si Fee Paid (S) 



HP * hjgriosl number of total daim* paid for. if greater than 20. 

^dep t ,,ciaimf fataJthilma £&m 

»3orHP « x 



HP a highest number of tndependetvt dams paid for, if greater than 3. 

3. APPLICATION SIZE FEE . m . , , . „ * 

If the specification and drawings exceed 1 00 sheets of paper (excluding electronically filed sequence or computer 
listings under 37 CFR 1 .52(e)), the application size fee due is $250($125 for small entity) for each additional 50 



sheets or fraction thereof. See 35 US.C 4l(aXl)(G)and 37 CFR U6fs>; 

Extra Sheets Number of each additional 50 or fraction mOfepi 



Tftlt^ Sheet? 



-100* 



/50* 



_ (round up to a whole number) x 



Fee m 



4. OTHER FEE(S) 

Non-English Specification, S 130 fee (no small entity discount) 

Other (e.g., late filing surcharge): Extorts ton Fee 



fee Paid ffl 



Fees paldtf) 



1, 02000 



Name (Prinl/Type) Ross D. Snyder 



Date 07.16-2006 



This cottecUonof Information Is required by 37 CFR 1,136. The information is requlicd to obtain o/ retain a benefit by the public wftfch is to file (and by the 
USPTO to pmcess) an application. ConMentlaUlyls9^e^edby3SU.S.C, 122and37CFR 1.14. This coBecbon is estimated to lake 30 minutes to complete, 
including gathering, preparing, and submitting the completed application form to the USPTO. Time wBJ vary depending upon 0* individual case. Any^mments 
on the amount of Uroe yosi require to complete this form and/or suggestions for reducing this bunion. stouW be sent to .the CNef ^^^^^^™SL 
end Trademark Office. U.S. OeparVnent of Commerce. P.O. Sox 1450. Alexandria. VA 22313-1450. DO NOT SEND FEES OR COMPLETED FORMS TO THIS 
ADDRESS. SEND TO: Commissioner for Patents, P.O. Box 1450, Alexandria, VA 22313-1450. 

If you need assistance in completing the form, can 140OPTO9199 end select optan 2. 




IN THE UNITED STATES PATENT AND TRADEMARK OFFICE 

. cant(s): Denis Proulx, et al. 
""Title: METHOD AND SYSTEM FOR IP LINK MANAGEMENT 
App.No.: 10/027,821 Filed: 12-19-2001 

Examiner: Ke, Peng Group Art Unit: 2174 

Atty.Dkt.No. 1400.1374890 

Mail Stop Amendment 
Commissioner for Patents 
PO Box 1450 

Alexandria, VA 22313-1450 

RESPONSE 

Dear Sir: 

In response to the Office action of May 18, 2005 and further in response to the Notice of Non- 
Compliant Amendment (37 CFR 1,121), please amend the above- identified application as follows: 
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In the Specification: 

Please delete the paragraph found on page 5, line 23, through page 6, line 3, of the 
specification and replace it with the following paragraph: 

The configuration of large networks changes frequently due to addition, removal and/or 
5 replacement of network devices. To effectively manage large networks such that IP packets are 
routed correctly over the network, the network manager must know when data forwarding 
network devices are added or removed. One system used to discover network devices with data 

forwarding capabilities is described in U.S. Patent Application No. [[ )] 10/029.124, 

filed December 19. 2001 . titled "Method and Apparatus for Automatic Discovery of Network 
10 Devices with Data Forwarding Capabilities," assigned to the assignee of the present invention 
and incorporated by reference herein. 

Please delete the paragraph found on page 6, line 19, through page 7, line 2, of the 
specification and replace it with the following paragraph: 

In addition to knowing the identity and physical configuration of the network devices 
15 themselves, it is also important for the network manager to be able to monitor logical 

connections between network devices. A logical connection exists between network devices 
when at least one port of a first network device is configured so that a message sent out through 
that port would arrive at a known destination (either a network address or a second network 
device). The destination may be a particular port or interface on another network device, a 
20 particular IP address, or a particular subnetwork. One system used to discover logical links 

between network devices is described in U.S. Patent Application No. [[ )1 

10/029.123. filed December 19. 2001 . titled "Method and Apparatus for Automatic Discovery of 
Logical Links between Network Devices," assigned to the assignee of the present invention, and 
incorporated by reference herein. 

25 Please delete the paragraph found on page 25, lines 1-14, of the specification and replace 

it with the following paragraph: 

• 2- 
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An IP Link can be created via the embodied NMS GUI manually, by SNMP IP Link trap 
for some routers, or by the auto-discovery process (per co-pending Application No. 

[[ ]) 10/029.123 . "Method and Apparatus for Automatic Discovery of Logical Links 

between Network Devices"). An example of an IP link provisioning GUI window according to 
at least one embodiment of the present invention is shown in Figure 4, and generally designated 
example GUI window 400. GUI window 400 typifies what a user would see for provisioning a 
new point-to-point IP link by opening the New->Unk->IP Link->Point-to~Point configuration 
form (not illustrated). A window title 405 appears at the top of the form to indicate the purpose 
of the window. The user may select the Link Numbering Type (Numbered or Unnumbered) with 
Link Numbering Type selection button 407. Link Numbering Type selection button 407 has 
"Numbered" selected in the example of Figure 4. The user may also select the Link Application 
(IP Forwarding, IP Forwarding and MPLS, or MPLS) with the Link Application selection button 
408. In the same manner, the Link Sub layer Interface (ATM, POS, GigEthernet) may be 
selected with the Link Sub leaver Interface selection button 409. 
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In the Claims: 

1 . (Original) A network administration method for provisioning logical configuration 
links for at least two network devices through a dedicated graphical user interface form, the 
method comprising: 

selecting a network device having at least one network interface through the dedicated 
graphical user interface form; 

determining local interface and next neighbor information for the network device; 

determining whether the local interface and next neighbor information is associated with 
a logical configuration link stored among a plurality of logical configuration links in a logical 
link database; 

creating a new logical configuration link when the local interface and next neighbor 
information is not associated with any of the logical configuration links in the logical link 
database; 

storing the new logical configuration link in the logical link database; 

validating the new logical configuration link; 

sending the new logical configuration link to the network device; and 

displaying a graphical representation of the new logical configuration link on a display 

device. 

2. (Original) The method of claim I , wherein the step of creating a new logical 
configuration link further comprises the steps of: 

selecting a link type; 

selecting a link numbering type for the new logical confijguration link; 
selecting a link application for the new logical configuration link; 
selecting a sub layer interface type for the new logical configuration link; 
creating a first endpoint for the new logical configuration link; and 
creating a second endpoint for the new logical configuration link. 

3. (Original) The method of claim 2, wherein the step of selecting the link type further 
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comprises the step of: 

selecting the link type from among a group consisting of: point-to-point, point-to-D?, and 
point-to-subnet. 

4. (Original) The method of claim 2, wherein the step of selecting a link numbering 
5 type further comprises the step of: 

selecting the link numbering type from a group consisting of: a numbered type and an 
unnumbered type. 

5. (Original) The method of claim 2, wherein the step of selecting a link application 
10 further comprises the step of: 

selecting the link application from a group consisting of: Internet Protocol Forwarding, 
Multi-Protocol Label Switching and Internet Protocol Forwarding, and Mult i -Protocol Label 
Switching, 

! 5 6. (Original) The method of claim 2, wherein the step of selecting a sub layer interface 
type further comprises the step of: 

selecting the sub layer interface type from a group consisting of: Packet Over Sonet, 
Asynchronous Transfer Mode* and GigEthemet. 

20 7. (Original) The method of claim 1 , further comprising the step of: 
modifying a logical configuration link in the logical link database. 

8. (Original) The method of claim I, further comprising the step of: 
deleting a logical configuration link in the logical link database. 



9. (Original) Apparatus for provisioning logical configuration links comprising: 

a logical link database for storing logical configuration links; 

a processing system coupled to the logical link database for accessing the logical link 
database; and 



25 
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a display device coupled to the processing system for displaying a graphical user 
interface form comprising a graphical representation of a logical configuration link. 
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10. (Original) The apparatus of claim 9 wherein the display device provides an ability to 
select a network device having at least one network interface through the graphical user interface 
form. 



1 1 . (Original) The apparatus of claim 9 wherein the processing system determines local 
interface and next neighbor information for the network device. 

1 2. (Original) The apparatus of claim 1 1 wherein the processing system determines 
10 whether the local interface and next neighbor information is associated with one of the logical 



13. (Original) The apparatus of claim 12 wherein the processing system creates anew 
logical configuration link when the local interface and next neighbor information is not 

15 associated with any of the logical configuration links stored in the logical link database. 

14. (Original) The apparatus of claim 13 wherein the processing system causes the new 
logical configuration link to be stored in the logical link database. 

20 15. (Original) The apparatus of claim 14 wherein the processing system validates the 
new logical configuration link. 

16. (Original) The apparatus of claim 15 wherein the processing system causes the new 
logical configuration link to be sent to the network device. 

25 



5 



configuration links stored in the logical link database. 
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REMARKS/ARGUMENTS 



The Examiner has issued a Notice of Non-Compliant Amendment (37 CFR 1.121), stating as 
follows: 



THE FOLLOWING MARKED (X) 1TEM(S) CAUSE THE AMENDMENT DOCUMENT TO BE 
NON-COMPLIANT: 

4. Amendments to the claims: 

A. A complete listing of all of the claims is not present. 

Applicant quotes 37 CFR 1.121(c), in relevant part, as follows: 

(c) Claims. .Each amendment document that includes a change to an existing claim, 
cancellation of an existing claim or addition of a new claim, must include a complete listing of 
all claims ever presented, including the text of all pending and withdrawn claims, in the 
application .... [emphasis added] 

Applicant notes that not only was there no "change to an existing claim, cancellation of an 
existing claim or addition of a new claim*' in the response for which the Examiner issued the Notice of 
Non-Compliant Amendment (37 CFR 1.121). but there was no "change to an existing claim, 
cancellation of an existing claim or addition of a new claim" in response to the previous Office action. 
Moreover, Applicant notes there has been no "change to an existing claim, cancellation of an existing 
claim or addition of a new claim'* since the application was originally filed. Accordingly, pursuant to 
37 CFR 1.121(c), Applicant submits no "complete listing of all of the claims" need be presented and 
further that the previously filed response for which the Examiner issued the Notice of Non-Compliant 
Amendment (37 CFR 1.121) was complete, proper, and fully compliant with 37 CFR 1.121 when and 
as filed. Applicant further submits the Notice of Non-Compliant Amendment (37 CFR 1 . 121 ) was 
improperly issued, as Applicant submits no justification for its issuance exists. Accordingly, Applicant 
respectfully requests the Examiner rescind the Notice of Non-Compliant Amendment (37 CFR 1.121) 
and continue reconsideration of the pending application in view of the previously filed response. 
Moreover, Applicant petitions the Commissioner of Patents add the time lost due to the improper 
issuance of the Notice of Non -Compliant Amendment (37 CFR !. 121) to any patent term adjustment 
and/or patent term extension to any patent that may issue from the pending application. Applicant 
encloses herewith payment for an extension of time under 37 CFR 1.136(a) to respond to the 
improperly issued Notice of Non-Compliant Amendment (37 CFR 1.121). However, as Applicant 
submits Applicant's original response was fully compliant with 37 CFR 1.121, Applicant hereby 
requests a refund of the payment enclosed herewith. To comply with the Notice of Non-Compliant 
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Amendment (37 CFR 1 . 12!) despite Applicant's protest as to the impropriety of the Notice, Applicant 
has amended this response to include a "complete listing of all of the claims." Applicant notes that all 
of the claims of the listing include the status identifier "(Original )*' as all of the claims remain 
unchanged since the original filing of the present application. The "REMARKS/ARGUMENTS" of 
the previously filed response as set forth below: 

Claims 1-16 are pending in the application. The Examiner has rejected claims 1-16. Applicant 
respectfully requests reconsideration of pending claims 1-16. 

In response to the previous Office action, Applicant submitted amendments to the specification 
to include identifying information (e.g., application numbers, filing date) of co-pending applications 
referenced in the specification. However, Applicant notes certain indications (e.g., underlining, double 
square brackets) appear not to have printed properly. Thus, Applicant resubmits the previously 
submitted amendments to the specification in a form that includes such indications. Applicant submits 
no new matter has been added and the omission of the indications in the previous response was 
inadvertent. 

The Examiner has rejected claims 9 and 10 under 35 U.S.C. § 102(e) as being anticipated by 
Hansen, U.S. Patent No. 6,772,204. Applicant respectfully disagrees. 

Regarding claim 9, Applicant submits the cited reference fails to disclose the features of claim 
9. For example, while the Examiner previously acknowledged, "Hansen does not teach a logical link 
database for storing logical configuration links," the Examiner now alleges Hansen teaches such, citing 
column 13, lines 40-48, and stating, "It is inherent there is a database for storing a list of available 
connection interface overlayed on the network configuration map." While the Examiner asserts a 
rejection based on inherency, Applicant submits that the teachings of the cited reference fail to 
establish inherency in accordance with existing law. For example, Applicant submits that the 
Examiner has failed to establish that the public gained the benefit of the subject matter recited in claim 
9 from the teachings of the cited reference. Schering Corp. v. Geneva Pharmaceuticals, 339 F.3d 1373 
(Fed. Cir. 2003). As another example, Applicant submits that the Examiner has failed to establish that 
the subject matter recited in claim 9 is present in the teachings of the cited reference. Mentor v. 
Medical Device Alliance, 244 F.3d 1365 (Fed. Cir. 2001); Scaltech v. Retec/Tetra y 178 F.3d 1378 (Fed. 
Cir. 1999). Thus, Applicant submits that the subject matter recited in claim 9 cannot be considered to 
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be inherent in the teachings of the cited reference. Accordingly, Applicant submits the Examiner has 
failed to satisfy the burden of proof required for asserting a rejection based on inherency. Therefore, 
Applicant submits that the Examiner has not shown claim 9 to be anticipated by the cited reference. 
Consequently, Applicant submits claim 9 is in condition for allowance. 

Regarding claim 10, Applicant submits the cited reference fails to disclose the features of claim 
10. For example, claim 10 depends from claim 9, and Applicant has presented reasons for the 
allowability of claim 9. Thus, Applicant submits claim 10 is also in condition for allowance. 

The Examiner has rejected claims 1-8 and 1 1-16 under 35 U.S.C. § 103(a) as being 
unpatentable over Hansen, U.S. Patent No. 6,772,204 in view of Lam et al M U.S. Patent No: 6,381,237. 
Applicant respectfully disagrees. 

Regarding claim I, the Examiner acknowledges, u Hansen does not teach creating anew logical 
configuration link when the local interface and next neighbor information is not associated with any of 
the logical configuration links in the logical link database and storing the new logical configuration 
link in the logical link database," but alleges that Lam does, citing column 9, lines 1-6, of Lam. In the 
Examiner's Response to Arguments, the Examiner alleges, "Lam teaches creating a subnet network 
connection or a logical configuration link when it is missing from the trail database, (col. 8, lines 52- 
64) The missing subnet network connection is the connection between the local interface and next 
neighbor information because during the construction of the connection, the learning trail is in fact 
creating a connection point with the neighboring sub-network, (col. 9, lines 20-53)." Applicant 
respectfully disagrees. 

Applicant submits. the cited portions of Hansen and Lam, taken either alone or in combination, 
fail to render obvious the features of claim 1 .... For example, Applicant submits the cited portions of 
Hansen and Lam do not render obvious "creating a new logical configuration link when the local 
interface and next neighbor information is not associated with any of the logical configuration links in 
the logical link database." In column 8, lines 52-53, of Lam, as cited by the Examiner, Lam states, in 

part, "...when an SNC is found only in the network 10 and missing from the trail database 50 " In 

column 9, line 38, of Lam, as cited by the Examiner, Lam states, "Finally, the trail learner 48 creates a 
link connection 92...." As apparently depicted in Fig. lOof Lam, Applicant submits SNCs, such as 
SNC1 and SNC2 appear to be distinct from link connection 92. Thus, Applicant submits Lam appears 
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to fail to provide teachings consistent with "determining whether the local interface and next neighbor 
information is associated with a logical configuration link stored among a plurality of logical 
configuration links in a logical link database; creating a new logical configuration link when the local 
interface and next neighbor information is not associated with any of the logical configuration links in 
the logical link database; [and] storing the new logical configuration link in the logical link database," 
As one example, Applicant submits Lam appears to teach creating something different from that which 
it stores. As another example, Applicant notes, based on Fig. 10 of Lam, SNCs of Lam appear not to 
enable "determining whether the local interface and next neighbor information is associated with a 
logical configuration link stored among the plurality of logical configuration links in a logical link 
database." Thus, Applicant submits the teachings of the cited portions of the Hansen and Lam 
references cannot be combined to yield the features set forth in claim I . Moreover, Applicant submits 
the apparent inconsistency of the teachings of the cited portions of Hansen and Lam vis a vis the 
features of claim I impair the Examiner's alleged motivation to combine the alleged teachings of the 
cited portions of the Hansen and Lam references. 

Also, as noted previously. Applicant notes that the Examiner asserts that Hansen teaches 
"validating the new logical configuration link," "sending the new logical configuration link to the 
network device " and "displaying a graphical representation of the new logical configuration link on a 
display device," yet the Examiner acknowledges, "Hansen does not teach creating a new logical 
configuration link.,. " Applicant submits that Hansen's acknowledged failure to disclose "creating a 
new logical configuration link. . impairs the Examiner's argument that Hansen teaches "validating 
the new logical configuration link " "sending the new logical configuration link to the network 
device," and "displaying a graphical representation of the new logical configuration link on a display 
device." While the Examiner states, in the Examiner's Response to Arguments, "Although Hansen 
fails to teach creating a new logical configuration link, Hansen is not prevented from validate the 
logical configuration link one the linked is created using Lam's method," Applicant notes the apparent 
inconsistency of the teachings of the cited portions of the Hansen and Lam references, as discussed 
above, and the apparent tenuousness of alleging that a reference teaches validating a new logical 
configuration link while admitting that the same reference fails to teach creating the new logical 
configuration link. 
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In the Examiner's Response to Arguments, the Examiner also states, "Hansen teaches this 
limitation because "a list of available connection interface overlayed on the network configuration 
map" is a plurality of configuration links in a logical link database/ 1 citing column 13, lines 40-48. 
Applicant notes claim 1 recites, "determining whether the local interface and next neighbor 
information is associated with a logical configuration link stored among a plurality of logical 
configuration links in a logical link database/' Applicant submits the Examiner's alleged teaching in 
Hansen of "a plurality of configuration links in a logical link database" blurs any distinction of what 
the Examiner would allege to be -the local interface" and "the plurality of logical configuration links 
in a logical link database." Thus, Applicant submits the Examiner's interpretation of the teachings of 
the Hansen reference cannot be reconciled with the features recited in claim I. 

In the Examiner's Response to Arguments, the Examiner also states, "The examiner interprets 
determining connectivity in a network to be the same as determining local interface and neighbor 
information for the network device," citing column 10, lines 62-66, which state, in part, "The trail 
explorer. ..may not only explore connectivity. . .." Applicant submits a mere reference to "explore 
connectivity" fails to disclose the features "determining local interface and next neighbor information 
for the network device," as the cited portion does not appear to disclose "local interface," "next 
neighbor information," or "network device." For the foregoing reasons, Applicant submits claim I is 
in condition for allowance. 

Regarding claim 2, the Examiner appears to allege the same teachings based on the same 
portions of the same references as in the previous Office action. Applicant reiterates Applicant's 
previous arguments for the allowability of claim 2. Thus, Applicant submits claim 2 is in condition for 
allowance. 

Regarding claim 3, the Examiner acknowledges, "Hansen .does not selecting the link type from 
among a group consisting of: point-to-point, point-to-IP, and point-to-subnet." The Examiner asserts 
"official notice that point-to-IP and point-to-subnet link types are notoriously well known in the art of 
computer networks." Applicant respectfully disagrees and traverses the Examiner's alleged official 
notice. Applicant submits the Examiner has not presented evidence that such features would have been 
well known in the art at the time the invention was made. Thus, Applicant submits claim 3 is in 
condition for allowance. 
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Regarding claim 4, the Examiner acknowledges, "Hansen does not teach selecting the link 
numbering type from a group consisting of: a numbered type and an unnumbered type." The 
Examiner asserts "official notice that the unnumbered link numbering type is notoriously well known 
in the art of computer networks." Applicant respectfully disagrees and traverses the Examiner's 
alleged official notice. Applicant submits the Examiner has not presented evidence that such feature 
would have been well known in the art at the time the invention was made. Thus, Applicant submits 
claim 4 is in condition for allowance. 

Regarding claim 5, the Examiner acknowledges, "Hansen does not teach the method of claim 2, 
wherein the step of selecting a link application further comprises the step of: selecting the link 
application from a group consisting of: Internet Protocol Forwarding, Multiprotocol Label Switching 
and Internet Protocol Forwarding, and Multi-Protocol Label Switching." The Examiner asserts 
"official notice that Internet Protocol Forwarding, Multiprotocol Label Switching and Internet Protocol 
Forwarding, and Multi -Protocol Label Switching are notoriously well known in the art of computer 
networks." Applicant respectfully disagrees and traverses the Examiner's alleged official notice. 
Applicant submits the Examiner has not presented evidence that such features would have been well 
known in the art at the time the invention was made. Thus, Applicant submits claim 5 is in condition 
for allowance. 

Regarding claim 6, the Examiner acknowledges, "Hansen does not teach the method of claim 2, 
wherein the step of selecting a sub layer interface type further comprises the step of: selecting the sub 
layer interface type from a group consisting of: Packet Over Sonet, Asynchronous Transfer Mode, and 
GijgEthernet." The Examiner asserts "official notice that Packet Over Sonet, Asynchronous Transfer 
Mode, and GigEthernet are notoriously well known in the art of computer networks." Applicant 
respectfully disagrees and traverses the Examiner's alleged official notice. Applicant submits the 
Examiner has not presented evidence that such features would have been well known in the art at the 
time the invention was made. Thus, Applicant submits claim 6 is in condition for allowance. 

Regarding claim 7, the Examiner acknowledges, "Hansen does not teach the method of claim I, 
further comprising the step of: modifying a logical configuration link in the logical link database," but 
asserts that Lam does, citing column 10, lines 8-15, of Lam. Applicant has already noted the apparent 
inconsistency of the teachings of Lam et al. with the features recited in claim I , from which claim 7 
depends. In light of such apparent inconsistency, Applicant further submits that "update the trail 

- 12- 



Igo 



Application No: 10/027.821 PATENT 



In conclusion, Applicant has overcome all of the Office's rejections, and early notice of 
allowance to this effect is earnestly solicited. If, for any reason, the Office is unable to allow the 
Application on the next Office Action, and believes a telephone interview would be helpful, the 
Examiner is respectfully requested to contact the undersigned attorney. 

Respectfully submitted, 



Date 




Ross D. Snyder, 
Attorney for Applicant(s) 
Ross D. Snyder & Associates, Inc. 
POBox 164075 
Austin, Texas 787 1 6-4075 
(512) 347-9223 (phone) 
(512) 347-9224 (fax) 
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- The MAILING DATE of this communication appears on the coversheet with the correspondence address - 
Period for Reply 



A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE g MONTH(S) OR THIRTY (30) DAYS, 
WHICHEVER IS LONGER, FROM THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of Ume may be available under the provision* of 37 CFR i. 136(a). in no event however, may a reply be timely filed 
after SIX (6) MONTHS from the mating date of this communication. 
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• Failure to repy within tie set or extended period for reply will, by statute, cause the application to become ABANDONED (35 U.S.C. § 1 33). 

Any reply received by the Office later than three months after the maBlng date of this communication, even if timely filed, may reduce any 
earned patent term adjustment See 37 CFR i .704(b). 

Status 

1)13 Responsive to communicationfe) filed on 19 July 2006 , 
2a)D This action is FINAL. 2b)KI This action is non-finai. 

3) 0 Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayfe, 1935 CD. 1 1 , 453 O.G. 213. 

Disposition of Claims 

4) S Claim(s) U15 is/are pending in the application, 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) D Glaim(s) is/are allowed. 

6) (3 Claimfs) 1-15 is/are rejected. 

7) Q Claim(s) is/are objected to. 

8) D Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) D The specification is objected to by the Examiner. 

10) 0 The drawing(s) filed on is/are: a)D accepted or b)D objected to by the Examiner. 

Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1 .85(a). 
Replacement drawing sheet(s) including the correction is required if the drawing(s) is objected to. See 37 CFR 1.121(d). 

11) D The oath or declaration is objected to by the Examiner. Note the attached Office Action or form PTO-152. 

Priority under 35 U.S.C. § 119 

12) D Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 119(a)-(d) or (f). 
a)Q All b)D Some * c)D None of: 

1 Q Certified copies of the priority documents have been received. 

2. D Certified copies of the priority documents have been received in Application No. . 

3. Q Copies of the certified copies of the priority documents have been received in this National Stage 

application from the International Bureau (PCT Rule 17.2(a)). 
* See the attached detailed Office action for a list of the certified copies not received. 
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Art Unit: 2174 

DETAILED ACTION 

This action is responsive to communications: Amendment, filed on 7/19/06. 
Claims 1-15 are pending in this application. Claims 1 and 9 are independent claims. 

Claim Rejections - 35 USC § 102 
The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that form the 
basis for the rejections under this section made in this Office action: 
A person shall be entitled to a patent unless - 

(b) the invention was patented or described in a printed publication in this or a foreign country or in public use or on 
sale tn this country, more than one year prior to the date of application for patent in the United States. 

• Claims 1-4, and 7-15 are rejected under 35 U.S.C. 102(b) as being anticipated by Hansen 
US Patent 5,838,907. 

As per claim 1, Hansen teaches a network administration method for provisioning logical 
configuration links for at least two network devices through a dedicated graphical user interface 
form, the method comprising: 

Selecting a network device having at least one network interface through the dedicated 
graphical user interface form; (figure 3b, column 15, lines 18-32; To configure a device, the 
device must be selected first) 

Determining local interface and next neighbor information for the network device; (figure 
7, items 114, 1 16, 120, 126, 122, 118, and 124) 

Determining whether the local interface and next neighbor information is associated with 
a logical configuration link stored among a plurality of logical configuration links in a logical 
link database; (column 5, lines 35-65; Subsystem is a logical link database) 
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Creating a new logical configuration link when the local interface and next neighbor 
information is not associated with any of the logical configuration links in the logical ink 
databases; (column 15, lines 30-50; Unconnected PCI slot are unassociated connection) 

Storing the new logical configuration link in the logical link database; (column 13, lines 

10-30) 

Validating the new logical configuration link; (column 13, lines 10-30) 

Sending the new logical configuration link to the network device; (column 14, lines 41- 

60) and 

Displaying a graphical representation of the new logical configuration link on a display 
device, (column 14, lines 41-60) 

As per claim 2, Hansen teaches the method of claim 1 . Hansen further teaches the step of 
creating a new logical configuration lik further comprises the steps of; 

Selecting a like type; (column 13, lines 1-10; x. 25, frame relay, PPP and HDLC are link 

types) 

Selecting a link numbering type for the new logical configuration link; (column 11, lines 
13-30; PCI slots are numbered configuration links) 

Selecting a link application for the new logical configuration link; (column 14, lines 5-25; 
The script commands are applications; column 13, lines 65-column 14, lines 5) 

Selecting a sub layer interface type for the new logical configuration link; (column 14, 
lines 15-25; Connection identifiers are configuration links) 

Creating a first endpoint for the new logical configuration link; and 
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Creating a second endpoint for the new logical configuration link.(column 13, lines 10- 

30) 

As per claim 3, Hansen teaches the method of claim 2, wherein the step of selecting the 
link type further comprises the step of: 

Selecting the link type from among a group consisting of: point-to-point, point-to-lP, and 
pint-to-subnet, (column 13, lines 1-10; x. 25, frame relay, PPP andHDLC) 

As per claim 4, Hansen teaches the method of claim 4, wherein the step of selecting the a 
link number type further comprises the step of: 

Selecting the link numbering type from a group consisting of: a numbered type and an 
un-number type, (column 1 1 , lines 1 3-30; PCI slots are numbering type, column 1 3, lines 28- 
45; a list of connection interface is un-number type) 

As per claim 7, Hansen teaches the method of claim I, Hansen further teaches the step of: 
Modifying a logical configuration link in the logical link databases, (column 1 1 , lines 
41-53; Editing is modifying) 

As per claim 8, Hansen teaches the method of claim 1 , Hansen further teaches the step of: 
Deleting a logical configuration link in the logical link database, (column 10, lines 1-20) 
As per claim 9, it is of the same scope as claim I . Supra. 

As per claim 10, Hansen teaches the apparatus of claim 9. Hansen teaches wherein the 
display device provides an ability to select a network device having at least one network 
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interface through the graphical user interface form, (figure 3b, column I S, lines 18-32; To. 
configure a device, the device must be selected first) 

As per claim 11, Hansen teaches the apparatus of claim 9, Hansen further teaches the 
processing system determines local interface and next neighbor information for the network 
device, (figure 7, items 114, 116, 120, 126, 122, 118, and 124) 

As per claim 1 2, Hansen teaches the apparatus of claim 1 1 , Hansen further teaches the 
processing system determines whether the local interface and next neighbor information is 
associated with one of the logical configuration links stored in the logical link database, (column 
15, lines 30-50; Unconnected PC! slot are unassociated connection) 

As per claim 1 3, Hansen teaches the apparatus of claim 1 2, Hansen further teaches 
creates a new logical configuration link when the local interface and next neighbor information is 
not associate with any of the logical configuration links stored in the logical link database, 
(column 13, lines 10-30) 

As per claim 14, Hansen teaches the apparatus of claim 13, Hansen further teaches the 
processing system causes the new logical configuration link to be stored in the logical link 
database, (column 13, lines 10-30) 

As per claim 15, Hansen teaches the apparatus of claim 14, Hansen further teaches the 
processing system validates the new logical configuration link, (column 13, lines 10-30) 

As per claim 16, Hansen teaches the apparatus of claim 15, Hansen further teaches the 
processing system cause the new logical configuration link to be sent to the network device, 
(column 14, lines 41-60) 
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Claim Rejections - 35 VSC §103 



The following is a quotation of 35 U.S.C 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

Claim 5 is rejected under 35 U.S.C. 103(a) as being unpatentable over Hansen in view of 
Hansen US Patent 5,838,907 in view of Hard wick US Patent 5,550,816. 

As per claim 5, Hansen teaches the method of claim 2. Hansen fails to teach the step of 
selecting a link application from a group consisting of: 

Internet Protocol Forwarding, Multi-Protocol Label Switching and Internet Protocol 
Forwarding, and Multi-Protocol Label Switching. 

Hardwick teaches the step of selecting a link application from a group consisting of: 

Internet Protocol Forwarding, Multi-Protocol Label Switching and Internet Protocol 
Forwarding, and Multi-Protocol Label Switching, (column 43, lines 60- column 44, lines 5) 

It would have been obvious to an artisan at the time of the invention to include 
Hardwick's teaching with method of Hansen in order to provide a wide variety of access control 
tools that permit network managers to define the policy of how network group can interact 
within themselves. 

Claims 6 is rejected under 35 U.S.C. 103(a) as being unpatentable over Hansen in view of 
Hansen US Patent 5,838,907 in view of Chui US Patent 2002/0165978. 




Application/Control Number: 10/027,821 
♦Art Unit: 2174 



Page 7 



As per claim 6, Hansen ceaches the method of claim 2, Hansen fails to teach selecting a 
sub layer interface type further comprises the step of : 

Selecting the sub-layer interface type from a group consisting of; Packet over Sonet, 
Asynchronous Transfer Mode, and GigEthernet. 

Chui teaches selecting a sub layer interface type further comprises the step of : 

Selecting the sub-layer interface type from a group consisting of; Packet over Sonet, 
Asynchronous Transfer Mode, and GigEthernet. (Paragraph 0201) 

It would have been obvious to an artisan at the time of the invention to include Chui's 
teaching with method of Hansen in order to provide a wide variety of access control tools that 
permit network managers to define the policy of how network group can interact within 
themselves. 



Applicant's arguments with respect to claims 1-15 have been considered but are deemed 
to be moot in view of the new grounds of rejection. 



Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Peng Ke whose telephone number is (571) 272-4062. The 
examiner can normally be reached on M-Th and Alternate Fridays 8:30-5:00. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Kristine L. Kincaid can be reached on (571) 272-4063. The fax phone number for 
the organization where this application or proceeding is assigned is 571-273-8300. 
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[57] ABSTRACT 

A physical switching device for use in a communication 
network to swi»ch Open Systems Inlcrconnection (OSI) 
network layer packets and method of use therefor is pro- 
vided. The physical switching device includes at least a first 
and a second virtual switch. Each virtual switch includes a 
decision mechanism for determining an associated directive 
based on a destination identifier within a particular packet 
received at a data port. A processor is coupled to each virtual 
switch to insert the particular packet into an outgoing data 
stream on another data port to deliver the packet Both data 
ports arc associated with a plurality of data interfaces in the 
physical switching device. A management apparatus is 
coupled to each virtual switch to maintain information on an 
association between the plurality of data interfaces and the 
virtual switches. The management apparatus limits each 
processor to only inserting the particular packet on another 
data port associated with the same virtual switch which 
received the particular packet. 
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METHOD AND APPARATUS FOR VIRTUAL 
SWITCHING 

RELATED INVENTIONS 

The present invention is related to: 

Co-pending U.S. patent application Ser. No. 08/366,221, 
filed on Dec. 29, 1994, which is entitled "Method And 
Apparatus For Accelerated Packet Forwarding" by 
Mark Bakke et a!., io 

Co-pending U.S. patent application Ser. No. 08/366,225. 
filed on Dec 29. 1994, which is entitled "Method And 
Apparatus For Accelerated Packet Processing*' by Gcof 
Stone, 

Co-pending U.S. patent application Ser. No. 08/366,222, 15 
filed on Dec. 29, 1994, which is entitled ''Method And 
Apparatus For Radix Decision Packet Processing" by 
Gcof Stone, 

and which were all filed concurrently herewith and 
assigned to the assignee or the present invention. 

FIELD OF THE INVENTION 

The present invention relates generally to data commu- 
nication networks. More particularly, the present invention « 
relates to the operation of virtual switches within physical 
switching systems that direct the flow of protocol data units 
in the data communication networks. 

BACKGROUND OF THE INVENTION » 

In a data communication network, a forwarding device 
(e.g., a data packet switch) directs protocol data units (e.g., 
data packets) from one network node to another. These data 
packets may include voice, video, or data information as 35 
well as any combination thereof. 

To better understand how forwarding devices work within 
a data communication network, an analogy may be helpful. 
In many respects, data communication networks are similar 
to postal delivery systems, with pieces of mail, such as 40 
letters or packages, being comparable to the data packets 
which are transferred within a data communication network. 
In a postal delivery system, the pieces of mail may be input 
into the postal delivery system in a variety of ways. Once 
within the postal delivery system, all of the pieces of mail 45 
are collected and transported to nearby processing facilities 
where the pieces of mail are sorted for further processing. 
Although each piece of mail will have a unique delivery 
address, most of the pieces of mail arc automatically sorted 
by a shorter rip code, or some other type of routing code. 50 
Letters without zip codes must be sorted and processed by 
hand; Some postal delivery systems also have special forms 
of encoded delivery addresses, such as Post Office box 
numbers ai a Post Office, which are not recognizable by 
other postal delivery systems such as Federal Express or 55 
United Parcel Service. Regardless of which particular postal 
delivery system the piece of mail is deposited into, once the 
mail has been sorted by destination it is routed through 
additional intermediary processing facilities until it arrives 
at the local indicated by the destination on the piece of mail. 60 
At this point, the zip code or routing code is no longer 
suflicient to deliver the piece of mail to the intended desti- 
nation and the local delivery office must further decode the 
destination address in order to deliver the piece of mail to the 
intended recipient. In addition to processing pieces of mail 65 
for routing the mail to the correct destination, the pieces of 
mail may go on through several other processing steps. For 



example, if the piece of mail is going out of the country, it 
must go through a customs operation in each country. If the 
national postal delivery system is being used to deliver the 
piece of mail then it must also be transferred from one 
national postal delivery system to another. In a private postal 
delivery system however, this transfer step would not be 
necessary. The pieces of mail may also be monitored or 
filtered for such things as mail fraud violation or shipment 
of hazardous materials. 

Data packets arc manipulated in a data communication 
network in a manner similar to that by which pieces of mail 
are delivered in a postal delivery system. Data packets, for 
example arc generated by many different types of means 
and arc placed onto a communication network. Typically, the 
data packets are concentrated into a forwarding device, such 
as a local bridge or router, and arc then directed by size and 
desti nation over one or more media types (c.g„ fiber optic) 
which are connected to further forwarding devices that could 
be other larger or smaller bridges or routers. These destina- 
tion devices then deliver the data packet to its terminal end 
point (i.c, the end user). Along the way the data commu- 
nication network may perform filtering and monitoring 
functions with respect to the data packets. 

Just like postal delivery systems have experienced ever 
increasing volumes of mail which must be delivered, the 
volume of protocol data units being transferred across 
computer networks continues to increase as experience is 
being gained with this new form of communication delivery 
system and as more and more applications, with more and 
more expansive communications requirements arc being 
developed. In addition, quickly changing technology has 
made the underlying data transmission resources for com- 
puter communication networks relatively inexpensive. Fiber 
optics, for example, offer data transfer rates in the gigabyte 
per second range. 

One of the existing types of forwarding devices which 
offer the greatest potential to meet the increasing demand on 
throughput rates arc packet switches. Several classes of 
packet switches exist Each class differs substantially from 
the other class of devices, but all may be commonly referred 
to as packet switches or forwarding devices. 

A first class of packet switches is that commonly used in 
digital telephone exchanges. By analogy, these switches can 
perform the functions only of a dedicated mail truck which 
relays mail between post offices and drops mail pouches on 
a post office loading dock. These switches arc intended only 
to transfer packets among the devices in a single station, 
such as a telephone exchange, and arc not capable of 
performing any sorting operations. The format of the packet 
in these systems is chosen to make the hardware in the 
switch as simple as possible; and this usually means that the 
packets include fields designed for direct use by the hard- 
ware. The capabilities of this class of switches (for example, 
in such areas as congestion control) arc very limited in order 
to keep the hardware simple. 

A second class of packet switches is used in smaller or 
restricted computer networks, such as X.25 networks. By 
analogy, these switches arc equivalent to a group of #10 
envelope sorters in the Post Office. These sorters handle and 
process this size envelope efficiently within the post office 
by performing limited sorting and routing functions, but can 
not by themselves deliver mail to its destination. In some 
sense, these switches arc very different from the first class of 
packet switches described above, because several of this 
second class of packet switches can work together like 
several #1 0 envelope sorters can work at one time in the Post 
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Office. However, (here is one substantial similarity in that 
this second class of switches can only handle one format of 
packets (i.e., the protocols). The formats handled by the 
second class of packet switches is much more complex than 
those in the first class. This greater complexity is necessary 5 
because the protocols are designed to work in less restricted 
environments, and because the packet switches must provide 
a greater range of services. While the formats interpreted by 
the first class of switches are chosen for easy implementa- 
tion in hardware, the data packets handled by this second 10 
class of switches are generally intended to be interpreted by 
software (which can easily and economically handle the 
greater complexity) and provides the inherit benefit of 
incremental flexibility in the design of the packet switch. 

In a third class of packet switches, the packet protocols 15 
are intended to be used in very large data networks having 
many very dissimilar links (such as a mix of very high speed 
local area networks (LANs) and low speed long distance 
point to point lines). Examples of such protocols arc the 
United States designed Transmission Control Protocol/In- 20 
temet Protocol (TCP/IP), and the International Standards 
Organization's Connectionless Network Protocol (CLNP) 
protocols. 

In addition, this third class of switches (commonly 
referred to as bridge/routers) often must handle multiple 23 
protocols simultaneously. This third class of switches is very 
similar to the mail processing devices used in the modem 
postal system. Just as there are many countries, there arc 
many data packet protocols used in computer networks. 
While a single postal system was once thought to be 30 
sufficient to handle mail going anywhere in the world, today 
several competing systems like United Parcel Service. Fed- 
eral Express, and the U.S. Postal Service exist to handle the 
special needs of mail going to every country, state, city, 
town, and street in the world. Similarly, in computer com- 35 
munication systems, the packet switches arc more involved 
in the carrying of data, and must understand some of the, 
details of each protocol to be able to correctly handle data 
packets which are being conveyed in that protocol. The 
routers in this third class of packet switches often have to 40 
make fairly complex changes to the data packets as they pass 
through the packet switch. 

It is this latter class of packet switches to which the 
following detailed description primarily relates. It will be 4J 
appreciated however, that the detailed description of this 
invention can readily be applied to the first and second class 
of switches as well. 

In current conventional packet switch design, a pro- 
grammed general, purpose processor examines each data so 
packet as it arrives oyer the network interface and then 
processes that packet. Packet processing requires assign- 
ment of the data packet to an outbound network imerfacefor 
transmission over the next communications link in the data 
path. • jj 

Currency, most bridge/router implementations rely 
heavily on off-the-shelf microprocessors to perform the 
packet forwarding functions. The best implementations are 
able to sustain processing rates approaching 100.000 packets 

per second (PPS). When dealing with media such as Ether- 60 consultants, roving sales and marketing people, and workers 



bridges/routers arc simply not capable of media-rate packet 
forwarding on emerging media such as asynchronous trans- 
fer mode (ATM) or Optical Connection- 12 Synchronous 
Optical Network (OC-12 SONET) which can accommodate 
communication rates up to 6 times the current 100 megabits 
per second limits to rates of 600 megabits per second. It 
should be noted that the ever increasing power of off-the- 
shelf microprocessors might solve the throughput problem, 
but this is probably a vain hope. For example, a single 
OC-24 ATM interface can sustain nearly 3 million internet- 
working protocol OP) packets per second. This is over 30 
times the rates achieved by the current best software tech- 
niques. If processing power doubles every year, the wait for 
sufficient processing power to make a software approach 
viable would be at least 4-5 years. In addition, the media 
capabilities will likely continue to increase over such a span 
of years. Additionally, any such processor will likely require 
large amounts of the fastest (most expensive) memory 
available to operate at full speed, resulting in an unaccept- 
ed y high system cost. 

Fortunately most individual packet switch customers will 
never require sustained packet transfer rates at these levels. 
However, the traditional approach of individual customers 
purchasing routers, bridges, modems, and leased phone lines 
is changing. A trend towards developing Metropolitan Area 
Networks (MANs) is beginning in the networking industry 
as an alternative to the traditional approach of individual 
customer local area networks (LANs) connected through 
customer owned leased telecommunication lines. 

The more successful entrants in this area are capitalizing 
on three trends: 
Fiber optic cable can be laid to most business and indus- 
trial premises by organizations possessing rights of 
way; this cable can be used to carry 100 Megabits/ 
second or more of customer traffic, a bandwidth that 
appears almost limitless to customers. 
The "demarkation point'* is changing from a pair of 
copper wires to an Ethernet socket; the MAN vendor 
takes responsibility for the delivery of Ethernet packets 
between sites specified by the customer. The customer 
does not have to be concerned with the intricacies of 
bridges, routers, and modems, which permits market 
penetration into a far less sophisticated customer base. 
Most potential customers are not interested in a public 
network connection. They simply want to interconnect 
a number of buildings or divisions which constitute the 
customer's enterprise in a metropolitan area. 
These MAN vendors are dealing with "customers" in the 
truest sense of the word, where customer and MAN vendor 
are independent enterprises. The titnds towards corporate 
decentralization arc even producing analogous situations 
within large enterprises. 

Second, enterprises are becoming far more distributed 
than before, and the very definition of an "enterprise" is 
changing. Where in the 1980's all individuals involved in a 
program could be expected to reside in one or two well 
defined locations, a more modem "enterprise" may consist 
of individuals from several divisions, several corporations, 



net or current telecommunications lines, this processing rate 
is more than adequate. When faster media such as the Fiber 
Distributed Data Interface (FDDI) are used, existing pro- 
cessing rates may still be sufficient as long as there is only 
one such. high packet rate interface present. When multiple 65 
high packet rate interfaces arc used, 100,000 PPS become 
inadequate. Current software-based implementations for 



who want to telecommute at their convenience. At the same 
time, this modem enterprise needs to protect their informa- 
tion from disclosure or sabotage from without the group 
while preserving a liberal access policy from within. 

A wide area backbone" is a tremendous investment on 
the part of any large enterprise. Yet at the same time, host 
computers and small scale networks are becoming easier to 
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administer while the expertise to administer them becomes send packages to the East coast of the United Stales on a 

more widespread.' At the same time, organizations with a regular basis. At first Federal Express, United Parcel Ser- 

bias towards decentralization are seeing departments and vice, and the United States Postal Services all send these 

divisions owning "their" hosts and "their" networks that packages by separate airplanes, but a bright entrepreneur 

they want to plug into a wide area backbone in order to carry 5 offers to build a special cargo plane thai will carry all three 

their traffic. This traffic typically consists of communications sets of packages to the East coast in a single trip. All of the 

to other divisions; however, increasingly ii will also consist services like the idea, because it saves them operating 

of traffic within a division with widely scattered sites. expenses, but they want assurances that (he none of the 

All of this follows a known trend of increasing decen- packages will get mixed with packages from other postal 

tralization in the workplace. Many years ago, Management to services. The entrepreneur agrees to divide the plane into 

Information System (MIS) computers and all the networks three separate cargo areas so that no mixture of packages is 

in the enterprise. Access policy (such as was needed then) possible. As a result, everyone is happy and the entrepreneur 

could largely be done through system administration of the now has a thriving business. The MAN vendors are very 

host computers. similar to this entrepreneur and the postal services can be 

The advent of personal computers and affordable work- is likened to individual companies or enterprises within the 

stations meant that the networking administrators no lougcr MAN'S coverage area. Each MAN vendor provides these 

owned all of the host computers anymore, yet these same separate cargo areas by assigning each cmcrprise to a 

MIS organizations are still charged with their traditional role different Closed User Group. Thus, even though data from 

of ensuring the integrity of the enterprise's data. This has led several enterprises arc traveling on the same MAN shared 

to the rise of routing and Tittering functions within routers, 20 medium data path, the data is separated by the Closed User 

making access control, a network, rather than a host prob- Group assignments. 

lem. Although the user of Closed User Groups by MAN 

Now the networking industry is moving up one more vendors offers a partial solution to the problems of "network 

level. Today, clients not only own their own hosts, they own of networks", there arc no existing solutions for managing 

their own networks and want to connect these networks on is Closed User Croups that provide protocols and management 

a network to network basis. Yet at the same time, the need tools equivalent to those now in use within a single network, 

to preserve the integrity of data moving among client A need still exists for an improved protocol data unit (i.e., 

networks still exists. This trend is producing not just a frame, cell, or packet) forwarding system which solves the 

"network", but a <4 network of networks", where tne purpose above-identified problems and promotes the use of the 

of a backbone is to serve the needs and foibles of its 30 Closed User Group paradigm, while providing a wide vari- 

constituent networks, not all of which may belong to the cty of access control tools that permit network managers to 

same enterprise. assign users to a group or groups, and then define the policy 

The concept of a Network of networks" is not new. In of how those groups can interact within themselves and with 

fact, this was one of the guiding philosophies which led to each other, 

the original creation of the Internet. Unfortunately, the logic 35 

to support this has only been appl ied to Internet Protocol and SUMM ARY OF THE INVENTION 
more recently to the Open Systems Interconnection (OSI) 

model. IP has been designed to perform this trick once (at The present invention provides a packet processing sys- 
the Internet level) and is little help in organizing traffic lem which contains virtual switches within physical switch- 
within a single IP network. Rirthermorc, IP cannot cope with 40 ift 8 systems that direct the How of protocol data units in a 
the notion thai a single network may be scattered at different data communication network. The present invention 
points throughout the Internet. addresses the problem of providing Closed User Groups on 

Thus, a need exists for a way to provide equivalent shared medium data paths by providing protocols, algo- 

protocols and management tools to those thai exist today rithms, and bridge/router architectural designs that are 

within a single network that will work in a "network of 45 capable of processing packets at multi-gigabyte rates while 

networks" paradigm. maintaining appropriate access policies and/or network 

One part of a solution to this problem is the use of Closed security measures. By using all of these principles, the 

User Groups. A Closed User Group is a potentially widely present invention reduces the cost of providing these packet 

distributed community of users and their associated net- switching services by enabling a single physical data switch 

worked computer equipment who rjermil free and open 50 t0 00 divided into two or more virtual switches which 

communications within the community, but severely restrict individually process packets from different Closed User 

communicaiton to points outside the cornmurtity. The use of Group?- With reference to the postal delivery analogy, the 

these Closed User Groups by MAN vendors is a means of present invention provides the details on how terminals at 

addressing the trend that network topological or geographic cacn airport can be designed, built, and operated to maintain 

proximity is becoming independent of access proximity. The 55 separate package cargo areas for each postal service (i.e., 

general concept of a Closed User Group network environ- separate virtual switches for each Closed User Group) to 

ment is where data packets from different enterprises never insure that packages from different postal services arc not 

interact with each other, however all of the data packets arc mixed up cither before or after they arc loaded onto the 

carried across at least part of the network on the same shared single airplane. 

media such an OC-1 2 data communications link. In a MAN 60 In accordance with a first aspect of the invention, a 

cnvironrncnt that supports closed user groups, LAN's con- physical switching device for use in a communication nci- 

taimng host computers arc identified as belonging to a work to switch OSI network layer protocol data traits within 

specific Closed User Group, and data packets for this LAN the communication network is provided. The physical 

are transported to the desired location, then validated on switching device includes at least a first and a second virtual 

receipt. 6s switch. Each virtual switch includes a decision mechanism 

To better understand this concept let's refer once again to for determining an associated directive based on a destina- 

the postal service analogy. Several postal services need to lion identifier within a particular protocol data unit received 
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at a data port A processor is openuivciy coupled to each 
virtual switch to insert the particular protocol data unit into 
an outgoing data stream on another data port according to 
the associated directive to enable delivery of the protocol 
data unit to the destination identifier. These data ports arc 5 
associated with a set of data interfaces selected from a 
plurality of data interfaces in a physical communication 
network switch. The set of data interfaces is assigned 
exclusively to a unique virtual switching device. These data 
ports can lake many forms, including but not limited to, a I0 
data interface on the physical switch, a time slot out of 
several time slots in a time-divided frame received at a data 
interface on the physical switch, and a code divided cell out 
of several code divided celts received at one or more data 
interface on the physical switch. 15 

The physical switching device preferably is designed to 
accommodate data interfaces of differing types such mat the 
set of data interfaces assigned to a virtual switch may 
include a first data interface which manipulates a protocol 
data unit having a different protocol type from a second data 20 
interface such that protocol data units of different protocol 
types can be switched within a single virtual switch. The 
different protocol data unit protocol types may differ by 
having differing OSI physical layer media types, differing 
OSI link layer signaling protocols, and/or differing OSI 25 
network layer protocols. 

A management apparatus is operativcly coupled to each 
virtual switch to maintain information on an association 
between the plurality of data interfaces and the virtual 
switches. The management apparatus includes a controller 30 
dependent on the association information for limiting the 
processor of each virtual switch to only inserting the par- 
ticular protocol data unit into an outgoing data stream oa 
another data port associated with the same virtual switch 
which received the particular protocol data unit. 35 

Further, it is desirable for the management apparatus to 
have a reassigning mechanism for changing a set assignment 
of a particular data interface such that the particular data port 
assignment can be moved between the virtual switching 
devices as needed (i.e., the data port can be moved). 40 

Furthermore, it is necessary for the management appara- 
tus to maintain a database of known destination identifiers 
and to require verification that the destination identifier in 
the particular protocol data unit is in the database prior to 45 
inserting the particular protocol data unit into an outgoing 
data stream on another data port such that delivery of the 
protocol data unit to an unknown destination identifier is 
prevented. 



ever, the management apparatus is different. This different 
management apparatus is a virtual link management appa- 
ratus which is operativcly coupled to the virtual switches. 
The virtual link management apparatus maintains informa- 
tion on at least one virtual link between at least the first and 
the second virtual switches. The virtual link has a first end 
and a second end of a data path on the shared communica- 
tion medium. Each end consists of a data port from the 
plurality of data interfaces in the physical communication 
network switch. 

The first and the second virtual link end of the at least one 
virtual link preferably are in a different set of data ports 
assigned exclusively to the first and the second virtual 
switch, respectively, such thai the virtual link provides a data 
path between the first and the second virtual switches on the 
shared communication medium. The first and the second 
virtual switches preferably are located in a single geographic 
location (i.e., within the same network hardware device 
rack) and the shared communication medium preferably is a 
memory shared between the first and the second virtual 
switches. 

Alternatively, the first and the second virtual switches 
may be geographically remote from one another. In addition, 
the first and the second virtual link ends may be in a single 
set of data interfaces assigned exclusively to the first and the 
second virtual switches such that the virtual link provides a 
data path between the first and the second virtual switches on 
the shared communication medium across a geographic 
distance. In this alternative arrangement, the shared com- 
munication medium preferably consists of a high data trans- 
fer rate link between the first and the second virtual switches 
which spans the geographic distance. 

In addition, a filler may be operativcly coupled to the data 
path which filters protocol data units communicated in either 
virtual link data path according to an access policy that is 
separately specified in each virtual switch. 

In accordance with a third aspect of the invention, a 
communication system which delivers OSI network layer 
protocol data units within a first and a second virtual closed 
user group on a shared communication medium is provided. 
The communication system includes a first virtual closed 
user group processor for examining and mocUfying data bits 
within a protocol data unit received from a member of the 
first virtual closed user group on the shared communication 
medium. Each member of the first virtual closed user group 
has a unique destination identifier The first virtual closed 
user group processor includes a delivery mechanism for 
delivering the modified protocol data unit to another mem- 



Each virtual switch processor preferably performs 50 ber of the fifSt virtual- closed user group. 



restructuring and/or monitoring operations on the particular 
protocol data unit. The rcstrociuring operations include 
deleting, inserting, and/or replacing bits in the particular 
protocol data trail in accordance with the associated direc- 
tive prior to inserting the particular protocol data unit into 55 
the outgoing data stream. The monitoring operations include 
dropping, sending, sending a copy of, and/or auditing the 
contents of the particular protocol data unit in accordance 
wilh the associated directive prior to inserting the particular 
protocol data unit into the outgoing data stream. w 

In accordance with a second aspect of the invention, a 
physical switching device for use in a communication net- 
work to switch protocol data units within the communication 
network on a shared communication medium is provided. 
The physical switching device includes at least a first and a 65 
second virtual switch which is similar to that which was 
described in the first aspect of the present invention; how- 



The communication system also includes a second virtual 
closed user group r^ocessor which is similar to the first 
virtual closed user group processor. The second virtual 
dosed user group processor examines and modifies data bits 
within a protocol data unit received from a member of the 
second virtual closed user group on the shared communica- 
tion medium. Also, each member of the second virtual 
closed user group has a unique destination identifier. Id 
addition, the second virtual closed user group processor 
includes a delivery mechanism for delivering the modified 
protocol data unit to another member of the second virtual 
closed user group. 

A framcr is operativcly coupled to the first and the second 
virtual closed user group processors to maintain a database 
of all destination identifiers currently reachable for delivery 
of protocol data units within the communication system. 
This framer preferably requires verification thai each desri- 
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nation identifier in a protocol data unit on the shared 
communication medium can be currently reached for deliv- 
ery through a lookup in the database, prior to completing 
delivery of the protocol data unit to the associated destina- 
tion identifier. The framcr preferably further limits access to 5 
the database such that each virtual closed user group only 
has access to specific destination identifiers owned by that 
particular virtual closed user group so that a protocol data 
unit having a destination identifier which is not owned by the 
particular virtual closed user group will not be delivered. (0 

Each virtual closed user group processor modifies and/or 
monitors protocol data units. The processor modifies data 
bits within a received protocol data unit by deleting, insert- 
ing, and replacing bits in the received protocol data unit 
prior to delivering the modified protocol data unit to another is 
member of the same virtual closed user group. The processor 
monitors the received protocol data unit by dropping, send- 
ing, sending a copy of, and auditing the contents of the 
received protocol data unit prior to delivering the modified 
protocol data unit to another member of the same virtual 20 
closed user group. 

In addition, each virtual closed user group processor 
preferably delivers the modified protocol data unit to another 
member of the same virtual closed user group without 
modifying the preoetermined OSl physical layer, link layer, 23 
and network layer access protocols used to communicate 
protocol data units over the shared communication medium. 
This provides seamless integration of this closed user group 
functionality to LAN managers even though the LANs may 
be operating within a MAN as separate closed user groups. 30 
This lack of modification of the access protocols also has the 
advantage of enabling each virtual closed user group pro- 
cessor to allow any particular device capable of communi- 
cating on the shared communication medium (e.g., port with 
a destination identifier) to be a member of either virtual 35 
closed user group by having the framcr means limit database 
access to destination idenuncrs associated with the particu- 
lar device to a particular desired virtual closed user group. 

The framcr preferably also includes a mechanism for 
assigning mcoming protocol data unit traffic to each virtual 40 
closed user group based on an access policy that is sepa- 
rately specified in each virtual closed user group. 

in the preferred ernbodimem communication system 
operations of the first and the second virtual closed user 4J 
group processor are performed by a first and a second virtual 
switch, respectively. Each virtual switch includes a decision 
mechanism for determining an associated directive based on 
a destination identifier within a particular protocol data unit 
received at a data port In addition, each virtual switch ^ 
includes a processor which performs the rune lions of the 
virtual closed user group delivery mechanism by inserting 
the particular protocol data unit into an outgoing data stream 
on another data port according to the associated directive to 
enable delivery of the protocol data unit to the dcstinaUon „ 
identifier within the protocol data unit 3 

In an alternative embodiment to this third aspect of the 
present invention, the operations of the first virtual closed 
user group processor arc divided between a first and a 
second virtual switch. This spreads the processing load # 
between iwo virtual switches and takes into account typical 
communication system configurations which have many 
geographically separate physical switches devoted to the 
same closed user group. 

In cither embodiment, the first and the second virtual 65 
switches may be located within a single physical switching 
device. Both data ports for each virtual switch arc then from 



a set of data interfaces in the physical switching device 
assigned exclusively 10 the same virtual switch. 

Also in cither embodiment, the first and the second virtual 
switches may be located within different physical switching 
devices. Both data pons for each virtual switch arc then from 
a set of data interfaces in the respective physical switching 
devices which arc assigned exclusively to the same virtual 
switch. As noted above, tlic different physical switching 
devices may geographically remote from one another. 

Each data port may be either a data interface on a physical 
switching device, a lime slot out of several time slots in a 
lime-divided frame received at a data interface on a physical 
switching device, or a code divided cells out of several code 
divided cells received at at least one data interface on a 
physical switching device. 

The physical switching device preferably is designed to 
accommodate data interfaces capable of manipulating dif- 
ferent, protocol types such that each set of data interfaces 
assigned to a virtual switch may include two or more data 
interfaces having mechanisms for manipulating protocol 
data units having different protocol types and the virtual 
switch is configured to switch protocol data unit coming 
from these data interfaces with different mechanisms. The 
differences in the protocol data unit data protocol types may 
include differing OSf physical layer media types, differing 
OSl link layer signaling protocols, and/or differing OSl 
network layer protocols. 

Each virtual switch processor modifies and/01 monitors 
protocol data units. The processor modifies data bits within 
a received protocol data unit by deleting, inserting, and 
replacing bits in the received protocol data unit prior to 
delivering the modified protocol data unit to another mem- 
ber of the same virtual closed user group. The processor 
monitors the received protocol data unit by dropping, send- 
ing, sending a copy of, and auditing the contents of the 
received protocol data unit prior to delivering the modified 
protocol data unit to another member of the same virtual 
closed user group. 

In addition, the communication system may include a 
virtual link between the first and the second virtual switches. 
This virtual link consists of a first end and a second end of 
a data path on the shared communication medium, where 
each end is a data port in a different virtual closed user 
group. To enforce access policies a filter may be operativcly 
coupled to the data path to filter protocol data units com- 
municated in the data path. 

This third aspect of the invention also can be implemented 
in & device-implemented method to deliver protocol data 
units within a first and a second virtual closed user group on 
a shared communication medium in a communication sys- 
tem This delivery method includes examining and modify- 
ing data bits within a protocol data unit received from a 
member of the first virtual closed user group on the shared 
communication medium wherein each member of the first 
virtual closed user group has a unique destination identifier. 
In addition, data bits within a protocol data unit received 
from a member of the second virtual closed user group on 
the shared communication medium arc examined and modi- 
fied. Each member of the second virtual closed user group 
also has a unique destination identifier. Further, a database 
of all destination identifiers currently reachable for delivery 
of protocol data units within the communicaUon system is 
maintained. Access to this database is limited such that each 
virtual closed user group only has access to specific desti- 
nation identifiers owned by that particular virtual closed user 
group. Also, verification that each destination identifier in a 
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protocol data unit on l be shared communication medium is 
currently reachable for delivery through a lookup in the 
database is required prior to completing delivery of the 
protocol data unit to the associated destination identifier. 
Subsequently, the first virtual closed user group modified 5 
protocol data unit is delivered to another member of the first 
virtual closed user group after verifying that the first virtual 
closed user group member destination identifier is currently 
reachable. In addition, the second virtual closed user group 
modified protocol data unit is delivered to another member 
of the second virtual closed user group after verifying that 
the second virtual closed user group member destination 
identifier is currently reachable. This results in protocol data 
units having destination identifiers which arc not owned by 
the particular virtual closed user group not being delivered 
anywhere. w 

Each examining and modifying process preferably 
includes modifying data bits within a received protocol data 
unit by deleting, inserting, and replacing bits in the received 
protocol data unit prior to delivering the modified protocol 
data unit to another member of the same virtual closed user 20 
group. Alternatively, each examining and modifying process 
may include monitoring the received protocol data unit by 
dropping, sending, sending a copy of, and auditing the 
contents of the received protocol data unit prior to delivering 
the modified protocol data unit to another member of the & 
same virtual closed user group. 

These device-implemented steps preferably arc per- 
formed such that all prcdetennined physical layer, link layer, 
and network layer access protocols used to communicate 
protocol data units over the shared communication medium 30 
are preserved. In other words, no changes to protocol like IP. 
ATM, OC-I2 or the like arc necessary to implement the 
present invention, because these steps are seamlessly inte- 
grated with this access protocols. This, seamless integration 
enables the addition benefit that any particular device 35 
capable of communicating on the shared communication 
medium can be a member of either virtual closed user group 
by performing an additional step of adding a destination 
identifier associated with the particular device to the data- 
base. 

These device-implemented steps preferably also include a 
step of assigning incorning protocol data unit traffic to each 
virttial closed user group based on an access policy that is 
separately specified in each virtual closed user group. 4J 

In addition, the device-implemented steps may include a 
step of providing a virtual link between the first and the 
second virtual closed user group. The virtual Jink includes a 
first end and a second end of a data path on the shared 
communication medium. Also, each virtual link end ^ 
includes a data port in a different virtual closed user group. 
A shared memory can be used as the shared communication 
medium to provide the virtual link. Alternatively, a high data 
transfer rale link which spans a geographic distance between 
the first and the second virtual closed user group can be 55 
utilized to provide the virtual link, A filtering process can be 
formed on the virtual link such that protocol data units 
communicated in the virtual link data path arc filtered 
according to an access policy. 

These and various other features as well as advantages go 
which characterize the present invention will be apparent 
upon reading of the following detailed description and 
review of the associated drawings. 

BRIEF DESCRIPTION OF THE DRAWINGS 

65 

FIG. 1 is a block diagram of a preferred embodiment 
packet processing system in accordance with the present 
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invention. 

FIG. 2 is a block diagram of a preferred embodiment 
physical switching device having virtual switches in accor- 
dance with the present invention. 

FIG. 3 is a block diagram of an alternative preferred 
embodiment physical switching device which has a virtual 
link in accordance with the present invention. 

FIG. 4 is a block diagram of another alternative preferred 
embodiment having virtual closed user groups in accordance 
with the present invention. 

FIG. 5 is a block diagram providing more detail for the 
decision ntecbamsm/r^erwoccssor shown in FIG, 2 in accor- 
dance with the present invention. 

FIG. 6 is a flowchart of the preferred embodiment opera- 
tions of the use of virtual closed user groups as shown in 
FIG. 4 in accordance with the present mvemioa 

FIG. 7 is a block diagram showing a configuration of 
Remote Groups in accordance with the present invention. 

FIG. 8 is a block diagram showing a virtual link in 
accordance with the present invention. 

FIGS. 9 arid 10 arc block diagrams showing an example 
of a purely segregated metropolitan network from a geo- 
graphic and connectivity point of view, respectively, in 
accordance with the present invention. 

FIGS. 11 and 12 are block diagrams showing an example 
of a purely segregated metropolitan network having Internet 
from a physical connectivity, and customer's management 
view, respectively, in accordance with the present invention 
view, respectively, in accordance with the present invention, 

FIG. 13 is block diagram showing an extension of the 
example shown in FIGS. 11 and 12 of a purely segregated 
metropolitan network having Internet which also wants to 
provide Internetworking Service in accordance with the 
present invention. 

FIGS. 14, 15, 16, and 17 arc block diagrams showing 
multiple virtual networks within an enterprise from a physi- 
cal, network topology, virtual routing, and consolidated 
router point of view, respectively, in accordance with the 
present invention; 

FIG. 18 is a block diagram showing an example of a 
component hierarchy including three Virtual Routers (VRs) 
and multiple protocol stacks and protocol ports in accor- 
dance with the present invention, 

FIG. 19 is a block diagram which shows the entire 
component hierarchy under the VR in accordance with the 
present invention. 

FIG. 20 is a block diagram which shows an example of 
multiple cluster bridges, each associated with one bridge 
protocol port in accordance with the present invention. 

FIG. 21 is a block diagram which shows an example of 
inter- VR component hierarchy which supports virtual links 
in accordance with the present inventioa 

FIG. 22 is a block diagram which shows a system 
overview of the VtrtualRoutcrProcess, FbrwardingAgent- 
Process, and the NetworkProtocolBascProcess in accor- 
dance with the present inventioa 

FIG. 23 is a block diagram which shows the per port 
initialization required prior to packet forwarding, including 
Virtual Router Creation and Provisioning, in accordance 
with the present invention. 

FIG. 24 is a block diagram which shows the per port 
initialization required prior to packet forwarding, including 
LAN Media Application Creation and Initialization, in 
accordance with the present invention. 
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FIG. 25 is a block diagram which shows the Forwarding 
Data Distribution — LAN Media which occurs after the LAN 
Media Application Creation and Initialization steps shown in 
FIG. 24, in accordance with the present invention. 

FIG. 26 is a block diagram which shows the Protocol * 
Binding— LAN Media which occurs after the LAN Media 
Application Creation and Initialization steps shown in FIG. 
24, in accordance with the present invention. 

FIG. 27 is a block diagram which shows the Packet 
Forwarding-— LAN Media in accordance with the present 10 
invention. 

FIG. 28 is a block diagram which shows the per port 
initialization required prior to packet forwarding, including 
Media Application Creation and Initialization— -Multi-point J5 
WAN. in accordance with the present invention. 

FIG. 29 is a block diagram which shows ihc Forwarding 
Data Distribution — Multi-point WAN which occurs after the 
Media Application Creation and Initialization steps sho wn in 
FIG. 7B y in accordance with the present invention. » 

FIG. 30 is a block diagram which shows the Protocol 
Binding— Multi.point WAN which occurs after the Media 
Application Creation and Initialization steps shown in FIG. 
28, in accordance with the present invention. 

FIG. 31 is a block diagram which shows the Packet 25 
Forwaro^g— Multi-point WAN in accordance with the 
present invention. 

FIG. 32 is a block diagram which shows the per port 
initialization required prior to packet forwarding, including 
Media Application Creation and Initial ization— Point to 30 
Point Protocol (PPP) WAN, in accordance with the present 
invention. 

FIG; 33 is a block diagram which shows the Forwarding 
Data Distributioa-rPPP WAN which occurs after the Media M 
Application Creation and initialization steps shown in FIG. 
32; in accordance with the present invention. 

FIG. 34 is a block diagram which shows the Protocol 
Binding— PPP WAN which occurs after the Media Appli- 
cation Creation and Initialization steps shown in FIG. 2$, in 40 
accordance with the present invention. 

FIG. 35 is a block diagram which shows the Packet 
Forwarding— JW WAN in accordance with the present 
invention. 

FIGS. 36 and 37 are block diagrams which show the 45 
Packet Forwarding for Virtual Link Media in accordance 
with the present invention. 

FIG. 38 is a block diagram which shows an example 
where the outbound physical port is on the same logical port 
(LP) as the inbound physical port in accordance with the 50 
present invention. 

FIGS. 39 and 40 are block diagrams which show other 
examples of outbound and inbound physical port assign- 
ments in accordance with the present invention. J$ 

FIG. 41 is a block diagram which shows the Packet 
Forwarding— Ouster Bridge Media in accordance with the 
present invention. 
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As will be appreciated by those skilled in the art, com- 
munication networks and their operations can be described 
according to the Open Systems lmercotmection (OSI) model 65 
which includes seven layers including an application, pre- 
sentation, session, transport, network, link, and physical 



layer. The OSI model was developed by the International 
Organization for Standardization (ISO) and is described in 
*Thc Basics Book of OSI and Network Management" by 
Motorola Codex from Addison- Wesley Publishing Com- 
pany, Inc., 1993 (First Priming September 1992). 

Each layer of the OSI model performs a specific data 
communications task, a service to and for the layer that 
precedes it (eg., the network layer provides a service for the 
transport layer). The process can be likened to placing a 
letter in a series of envelopes before it*s sent through the 
postal system. Each succeeding envelope adds another layer 
of processing or overhead information necessary to process 
the transaction. Together, all the envelopes help make sure 
the letter gets to the right address and that the message 
received is identical to the message sent. Once the entire 
package is received at its destination, the envelopes are 
opened one by one until the letter itself emerges exactly as 
written. 

In a data communication transaction, however, each end 
user is unaware of the envelopes, which perform their 
functions transparently. For example, an automatic back 
teller transaction can be tracked through the multilayer OSI 
system. One multiple layer system (Open System A) pro- 
vides an application layer that is an interface to a person 
attempting a transaction, while the other multiple layer 
system (Open System B) provides an application layer that 
interfaces with applications software in a bank's host com- 
puter. The corresponding layers in Open Systems A and B 
arc called peer layers and communicate through peer pro- 
tocols. These peer protocols provide communication support 
for a user's application, performing transaction related tasks 
such as debiting an account, dispensing currency, or cred- 
iting an account. 

Actual data flow between the two open systems (Open 
System A and Open System B), however, is from top to 
bottom in one open system (Open bottom to top in the other 
open system (Open System B^ the destination). Each time 
that user application data passes downward from one layer 
to die next layer in the same system more processing 
information is added. When that information is removed and 
processed by the peer layer in the other system, it causes 
various tasks (error correction, flow control, etc.) to be 
performed. The user is una ware of any of this, of course, but 
in fact that's what's happening while the words, "Please 
wait, your transaction is being processed" appears on the 
screen. 

The ISO has specifically defined all seven layers, which 
are summarized below in the order in which the data actually 
flow as they leave the source: 
Layer 7, the application layer, provides Tor a user appli- 
cation (such as getting money from an automatic bank 
teller machine) to interface with the OSI application 
layer. That OSI application layer has a corresponding 
peer layer in the other open system, the bank's host 
computer. 

Layer 6. the presentation layer, makes sure the user 
information (a request for $50 in cash to be debited 
from your checking account) is in a format (i.e„ syntax 
or sequence of ones and zeros) the destination open 
system can understand. 

Layer 5, the session layer, provides synchronization con- 
trol of data between the open systems (i.c., makes sure 
the bit configurations that pass through layer 5 at the 
source are the same as those that pass through layer 5 
at the destination). 

Layer 4, the transport layer, ensures that an end-to-end 
connection has been established between the two open 
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systems and is often reliable (i.e., layer 4 at the desti- 
nation "confirms the request for a connection; ' so to 
speak, that it has received from layer 4 at the source). 
Layer 3, the network layer, provides routing and relaying 
of data through the network (among other things, at 5 
layer 3 on the outbound side an "address" gels slapped 
on the '^envelope" which is then read by layer 3 at the 
destination). 

Layer 2, the data link layer, includes flow control of data 
as messages pass down through this layer in one open to 
system and up through the peer layer in the other open 
system. 

Layer 1, the physical interface layer, includes the ways in 
which data communications equipment is connected 
mechanically and electrically, and the means by which is 
the data move across those physical connections from 
layer I at the source to layer 1 at the destination. 
The first and primary item in the Virtual Routing (VR) 
toolbox is the notion of a Virtual Router (Lc„ virtual switch). 
Traditionally, multiprotocol bridge/routers have a single ^ 
version of IP, bridging, IPX. etc in operation, which coor- 
dinates the flow of traffic between all ports activated for the 
protocol. Single events on one incoming port can simply or 
profoundly affect the flow of traffic on other ports. 

To implement virtual routers, object oriented software 
techniques are used to create separate instances of raulii- 25 
protocol bridge/router code residing on the same router 
platform. Each operates independently of one another and is 
not directly aware of the existence of other virtual routers. 

The simplest example of Virtual Routing consists of the 
case where the population of physical interfaces 102, 110 on 30 
the router ISO is partitioned among the Virtual Routers 152, 
154, 156 running in the chassis as shown in FIG. 1. This is 
a software partitioning, which means that: 
AH management continues to be done through a single, 

possibly redundant control processor. 33 
The partitioning of connectivity into Virtual Routers 152, 
154, 156 is done on a per interface basiSv rather than a 
per card basis. As we'll sec later, the partitioning can be 
further refined to individual media destinations on _ 
selected media. 
What this means is that, in a first step, an owner of the 
multiprotocol bridge/router 150 has now been gi ven three 
routers 152, 154, 156 for the price of one. If they are 
servicing the needs of several organizations, the cost of a 45 
highly available and manageable enterprise router can be 
spread over several independent clients. 

The cost savings in routers can be significant. However, 
over time the cost of wide area network services can dwarf 
the up front router equipment costs. The second step in x 
Virtual Routing is to permit the media 158 to be shared in 
such a way as to give each Closed User Group the impres- 
sion that they have a medium to themselves. 

A solution can be provided for this problem through the 
use of remote groups. Remote groups are a means of sharing 5J 
multipoint wide area networks among several Closed User 
Groups. This is done rather simply: 
Multi-point WAN's such as Frame Relay, X.25 and ATM 
work with the concept that a media address is 
prepended to the message payload. This media header go 
is used by the network to determine how the message 
shall be delivered Switched networks such as ATM 
often have a prerequisite signaling process which deter- 
mines the header to be used to reach a certain destina- 
tion. 

A multipoint WAN interface will remain informed of all 
the destinations which are currently reachable through 
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the WAN. The WAN internals will refer to them 
through the media address in the header. The interface 
is free to send or receive messages from any of these 
active remote destinations. 
The WAN software may be split into two portions: A 
Framer to maintain the state of the WAN connections, 
and a set of Remote Groups which are responsible for 
examining and processing the contents of the message. 
The Remote Group software more or less believes that 
it is the exclusive owner of the WAN interface,* how- 
ever the Framer only gives the Remote Group infor- 
mation on the specific media addresses owned by that 
group. 

One of the virtues of Remote Groups is that it does not 
modify the protocols used to communicate over the 
shared medium in any way. Specifically, any device 
capable of talking to the medium can be a member of 
a Remote Group. 
The result of such a configuration of Remote Groups is 
shown in FIG. 7. A single multipoint WAN has been carved 
into several multipoint WAN's, each of which may be used 
to service the needs of a different community. The example 
Frame Relay network has been split into two independently 
operating networks. It will be appreciated by those skilled in 
the art that multiple telecommunication interfaces and local 
loops to the Frame Relay service could also have provided 
this connectivity, but at considerably greater expense (i.e.. 
more hardware). 

Most significantly, a single multipoint WAN has been 
taken and divided such that a subset of it is available to each 
of several Virtual Routers. The administrative isolation of 
Virtual Routers have now been extended from within a 
chassis to independently operating systems of routers shar- 
ing both common chassis and a media backbone. 

So far the discussion has focused on techniques where 
groups can be entirely sealed from each other. However, 
there are reasons why these barriers should be partially torn 
down in the interests of better communications. Examples 
include: 

Permitting access for certain protocol families. For 
example, Appletaik and IPX arc not noted for scaling 
well over large domains, while IP docs a good job of 
this. Virtual Routing permits the limited area protocols 
to run fully separately, while the two IP regions arc 
interconnected. 
Permitting certain applications to run. For example, many 
sites are comfortable receiving IP electronic mail tragic 
from any point, do not wish general access. If traffic 
moves between domains at a small number of con- 
strained points it is easy to exercise policy at only those 
points rather than throughout the network. 
More than anything else, when moving from one user 
group to another, a change in access policy can occur. Every 
group wants to define their own policy for accepting traffic 
each other group. Thus, a mechanism is needed not only to 
pass traffic between user groups, but also a means whereby 
the owners of each user group can define the filtering desired 
for packets leaving and entering the group. 

As shown in FIG. 8, through the use of a networking 
medium Virtual Routers, which may be real, separate rout- 
ers, can be connected. Within a chassis containing several 
Virtual Routers, a point to point link between two of these 
Virtual Routers can be defined which is a complete software 
artifact— each Virtual Router defines an interface (i.c, 
sometimes called a Protocol Port) that is one end of this 
Virtual Link "pipe". Messages inserted in one end of the 
pipe logically arrive at an incoming port of the other Virtual 
Router. 
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In addition to per mining the raw movement of traffic, 
Virtual links permit protocol filters for traffic moving to and 
from the link. In fact, the filters on these links are often the 
most important in the design of a network, because a change 
from one network of routers and Virtual Routers to another 5 
coincides with a change in administrative policy as traffic 
moves from one domain to another. 

Virtual Links are seen as point to point links by oil 
networking protocols which reside in the unit. Thus, the 
Virtual Link can be used to carry IP, IPX. Appletalk and l0 
other internetworking traffic. Routing updates from proto- 
cols such as DEGnct Routing will Sow over the Virtual Link 
to update the routing tables an the other virtual router. This 
is the only way that the protocols in the separate Virtual 
Routers can communicate with each other, despite the fact ]5 
that they run in the set of physical processors. 

Forwarding data through a Virtual Link performs all the 
activity associated with an extra "hop" between two net- 
works. Time to Live counts are decremented and all filters 
are applied as if it were a real link. However, since a Virtual 20 
Link is a software artifact the overhead is small; the for- 
warding algorithms arc applied to the packet in succession 
when it arrives from an external medium, and it is not moved 
anywhere until an ultimate destination outside the box is 
found. Routes that involve packets progressing through 15 
multiple Virtual Links within the chassis arc both possible 
and reasonable in complex configurations. 

So far a service provider has been permitted to segregate 
traffic between customers but it is also necessary to manage 
this segregation. Since "Network Management" means too 30 
many different things to different people, a few terms should 
be defined for this discussion. 
Surveillance consists of the act of monitoring the status of 
network entities. Modifications of network parameters 
must take place through other channels. 33 
Provisioning consists of the act of modifying the configu- 
ration or operation of network equipment, cither tem- 
porarily or permanently. 
Data Privacy in this context means that the client has high 
assurance that other panics (other than the service 40 
provider) cannot intercept the user's data packets. Net- 
work Privacy means thai the details of the customer's 
network operations arc not available to other custom- 
ers. 

45 

Security in this management context means that no act on 
the part of another customer, however malicious, will 
affect operations of the closed user group. 
Also, two different techniques arc available to survey and 
provision , network equipment: ^ 
Simple network management protocol (SNMP), the Inter- 
net standard which has an assured place as the de facto 
technique for the management of all network equip- 
ment. SNMP is noted as being pretty effective for 
surveillance and light duly provisioning. Its limitations 53 
are that it cannot survey items specific to a vendor (such 
as chassis status) or perform massive provisioning 
(such as initial setup of the unit) without result to 
vendor extensions. 
CAS (Component Admiriistraiion System). The internal «0 
network surveillance and provisioning system specific 
to Network Systems Corporation equipment 
Both have their complementary attributes; SNMP is an 
excellent platform for monitoring the health and status of a 
remote, network attached device. With the advent of SNMP 65 
Version 2; it has become suitable for tweaking** devices 
through setting external parameters. A direct dialogue with 



CAS is better suited for wholesale changes in the configu- 
ration of the unit; CAS also permits access to the internal 
control features of a particular piece of network equipment 
which arc not defined in the standard SNMP vocabulary. 

To best take advantage of these complementary features, 
the following should be done: 
Access through CAS has an omniscient view of the box. 
All components are available for inspection or alter- 
ation by property authorized CAS users. Once a CAS 
user has read-only or modification rights on the chassis, 
all parameters of all virtual routers arc available. 
SNMP users work with a copy of SNMP which is part of 
their Virtual Router. Proper authorization permits one 
of two alternative views of the chassis. In "omniscient" 
mode, they perceive all interfaces in the unit and can 
modify their pararnctcrs. In "local" mode all interfaces 
are given an interface number for SNMP purposes, but 
the ones not owned by the virtual router will appear 
stubbornly offline regardless of their actual status. This 
permits the actual owner of the router access to the 
entire interface populau'on. while Virtual Router clients 
have access to only their own internal interfaces. 
SNMP. based "core" configuration information not asso- 
ciated with interfaces, such as filtering, IP routing 
parameters. DECnet node addresses, etc. arc only 
accessible from a host which can reach that Virtual 
Router. Since SNMP management requires IP, access to 
this core information requires a Virtual Link or other 
mechanism giving access to that Virtual Router. 
Under no circumstances can an SNMP user modify the 
router variables for a virtual router other than their own. 
If such a facility is provided, it can cither be done 
through CAS or by providing access to the SNMP stack 
of a "distant" Vmual Router through a Virtual Link. 
To better understand these principles, the following 
examples, arc given. 

A purely segregated mctropoliian network, shown in 
FIGS. 9 and 10 will be the simplest example of the set, 
because the situation is simplest. A utility, oriented company, 
Lightco, happens to own a large fiber optic cable plant that 
can be used to access local businesses. They choose to offer 
LAN interconnection services to these businesses as an 
additional revenue opportunity for themselves. 

Because it is an existing proven technology and well 
suited for the cable plant, FDD! is chosen as the backbone 
medium. In the example, three enterprises arc to be con- 
nected to a common FDDI metropolitan area network, with 
Points of Presence required at three different sites. 

The routers at a site serving one client run a single Virtual 
Router (or one Real Router, if you like). The ones serving 
two clients run one Virtual Router for each client. 

The advantages of Virtual Routing come into more into 
play when routing (c.g„ mcorporating public network 
access) becomes part of the picture. In the hypothetical 
example, connectivity to the Internet is offered through a 
drop at the Point of Presence (POP) of an Internet service 
provider. A Corp. wants unrestricted Internet access (or, 
more accurately, they will take responsibility for access 
within their own network). C Corp. wants mail access to a 
single machine on their network, and B Corp. is not inter- 
ested in Internet access at all. How can these divergent needs 
be handled? 

One solution is shown in FIGS. 11 and 12. Let us look at 
the noteworthy items in this new configuration: 
The FDDI backbone has been replaced with an ATM 
backbone The customer is oblivious to the change 
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(other than by examining the unit internals through 
network management). For simplicity. Permanent Vir- 
tual Grcuils (PVC's) are employed in this metropolitan 
ATM network. One PVC must be established between 
every pair of virtual routers thai wish to communicate. 5 
For example, chassis 224 will require four PVC's. One 
to the chassis* 224 B Corp. virtual router to the chassis 
226, one from chassis 224 A Corp. virtual router to the 
chassis 230. and one each from the each chassis 224 
virtual router to each customer's Virtual Router on the 0 
chassis 232. 

Each Virtual Router in the chassis 232 is probably admin- 
istered by the Internet service provider, where they 
offer the customer the right to inspect the current 
statistics of that router via SNMR That Virtual Router 
takes traffic off the ATM network and performs IP 15 
routing on it. That Virtual Router has a single other port 
with an IP address indicating it belongs on the distri- 
bution LAN at the Internet Service provider's POP. 
Each virtual Router serves as a mechanism to filter 

packets according to the customer's expectations. 
For A Corp., filters are installed which permit unlimited 
access to one specific IP address, and default filters deny 
Telnet, rlogin, FTP, etc, access from the Internet to all other 
hosts. 

For the more paranoid C Corp., all IP packets directed 25 
from the Internet to all hosts but one are denied. On that 
single host, packets for Simple Mail Transfer Protocol 
(SMTP) Domain Name Service, and Internet Control Mes- 
sage Protocol (ICMP) are permitted to pass. 

Again taking the physical examples above, the techno- 30 
logically progressive A Corp. chooses to switch to a routed 
backbone as shown in FIG. 13, rather than the bridged, 
backbone in the previous examples. For simplicity, it is 
assumed thai they want to route IP while continuing to 
bridge "other" traffic. Very little needs to change from the 33 
previous example. Steps have already been taken as needed 
to segregate A Corp/s traffic from all others, so all that is 
needed is to concentrate on A Corp/s concerns within their 
virtual routers. Thus, if wc look at ACorp/s virtual network 
in isolation, perhaps giving the situation shown in FIG. 13. *° 
The ATM PVC's and bridging parameters stay the same — 
only IP is activated for the ports on and off the ATM MAN. 
Open Shortest Path First (OSPF) or RouUng Information 
Protocol (RIP) is run in each of the virtual routers so that 
automatic route discovery may take place. * 5 

This means that the entire idea is that things become 
simple at this level once virtual routing is in place. It should 
be noted what has been done in IP terms: 
The MAN carrier has isolated the proper portion of their 
connectivity plant and given it to the customer. The 50 
customer is free to assign a subnet that they own to this 
segment, permitting a routed IP network to be used to 
interconnect the many subnets which presumably lie at 
each site. This feat can be duplicated for any desired 
number of routing customers. 55 
The three routers arc SNMP visible to the customer. Given 
proper authority, they may alter parameters which arc 
settable via SNMP. Since they arc isolated to their 
Virtual Routers the privacy and integrity of other ^ 
customer's data is unaffected. 
Routers supporting traffic for several customers must be 
routers with Virtual Networking. Routers to service a 
single customer can be of any make offering suitable 
connectivity. ^ 
The ATM-backbone is visible to the customer as an ATM 
network. If the MAN carrier has a more complex 
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backbone than that, FDD! can be disguised such that 
the internals of the MAN plant from the customer and 
have it appear as a "cloud". Native ATM transfers may 
take place from the same router to service the needs of 
Different customers. 
Finally, it should be noted that this more sophisticated 
customer is using routers of their own as a gateway between 
their numerous LAN's and the metropolitan access node. A 
metropolitan service provider which feels up to handling the 
administrative work might consider offering multiple LAN 
connections to the user at each site, where traffic is routed 
between the LAN's at little incremental expense to the 
client. Since all these LAN's belong to the same Virtual 
Router, the generally unlimited access policies thai exist 
within a site can he followed while continuing to prohibit 
access to other clients, even if they share the same physical 
router. Pricing of such a service has to be aimed so that it is 
cost effective for the client to not purchase and administer 
their own router. 

So far several cases have been covered where there is an 
easily well defined vendor and customer relationship 
between the administrators and users of virtual routing. 
However, similar situations arise in single organizations 
where the constituents have differing needs and priorities. 
This is also known as enterprise networking with divisional 
autonomy and is shown in FIGS. 14. IS, 16, and 17 from a 
physical, network topology, virtual routing, and consoli- 
dated router point of view, respectively. For example: 
Corporations or government agencies with a highly 
decentralized structure, where each division realty 
warned its "own" network. 
Regional networking cooperatives which maintain a Wide 
Area Network to be shared by its constituent members. 
Let us look at a Corporate problem to see how Virtual 
Routing techniques may address these issues. For the last 
example, the case of the recently merged Alpha and Beta 
divisions of McgaCorp having come to cohabit the same 
campus. The networking group and the expensive wide area 
network are run by MegaCorp corporate, but the fiercely 
independent divisions wish to be isolated from each other. 
They offer reasons a management consultant might find both 
good and bad for wanting to do so: 
Both have retained their own computer support people 
who install hosts, servers, and wiring hubs in their 
respective departments. These people and their man- 
agers have gracclcssJy conceded to a common WAN 
and campus backbone, but staunchly resist attempts to 
control how "their" hosts will talk within the division. 
For historical reasons, both have different IP network 

numbers assigned to them. 
The Alpha group once paid for a fiber optic connection 
between two buildings which they will use in prefer- 
ence to the (slower) company routed backbone. They 
want to use the backbone as backup for their private 
link, however. 

Both run small pockets of Netware (IPX) applications 
scattered throughout their empires. Hosts have been 
known to inadvertently access the other division's 
servers, which was patched up through an elaborate, 
fragile series of bridge filters. 

Both are large Appletalk users, but have no reason to 
permit Appletalk interconnection. 

E-mail is commonly sent between both divisions and 
Corporate, and there arc TP based servers in each which 
are used to archive information the other division might 
want or need. 
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Both want Interact access through Corporate. They will 
determine access policy to the Internet within their 
division. 

To give the problem a tangible feel and a sense of reality, an 
illustration of the physical systems is shown in FIG. 14. 5 

There are number of ways to solve these problems. The 
simplest is the "brute force" approach, where in fact separate 
network plants are provided for each of our client customers 
and explicit, physical connections are built between them. 
One example is shown in FIG; 14. Some of the virtues of this J0 
configuration include: 
The Appletalk and IPX problem is solved neatly. IP is 
routed and a Mac layer bridging is used for everything 
else. Turning on Appletalk or IPX routing in each 
separate network will prcsem no difficulties if cither 15 
group independently decides they would prefer to route 
these protocols. 
The fiber link remains the property of Alpha, while the 
Frame Relay network will continue to work in a pinch. 
The vexing IP subnetting rule that you must stay within a 20 
subnet to reach any point on it is eliminated. There are 
entirely separate Frame Relay nets, each with a subnet 
owned by the separate division. 
IP filtering between the two networks is easy to admin- 
ister. All data moving between the two network arrive & 
at the Corporate router, who halts non-IP traffic and 
administers policy on the combination of Internet and 
other division traffic that will enter each divisional 
domain. 

So why not do it this way? To do it the "brute force" way 30 
with conventional bridge : routers, 5 Frame Relay local loops 
are needed instead of 3 and 6 Backbone and corporate 
routers are needed instead of 3; 

With a lot of tinkering on •'classic" bridge/routers, the 
ingenious corporate network planner might be able to 35 
acconunodaic these people with a single backbone and some 
filtering. However any changes, will have the habit of 
bringing the entire house of cards down, causing long 
service times on the core routers and frequent complaints 
following maintenance. Clearly a more controllable scheme 40 
is desired. A solution involving the construction of a set of 
filters on a "Brand X" bridge/router which meets the user 
requirements should be readily understood by those skilled 
in the art so it will not be provided here. 

Using Virtual Routers, a solution to this complex problem 45 
becomes more elegant. If the "brute force" configuration is 
referred to again and viewed from a network topology view 
as shown in FIG. 15 and reconfigure it in a Virtual Routing 
environment where the backbone routers arc physical rout- 
ers capable of virtual routing. The rcsul l is sho wn in FIG. 16. 30 
This particular "brute force" configuration was deliberately 
chosen among several brute force options to more easily 
illustrate the present invention; however, one of ordinary 
skill in the art will appreciate that these principles can be 
applied to any "brute force'' solution provided they are 53 
properly reconfigured into a virtual routing scheme. 

Several interesting things are apparent about this configu- 
ration, including: 

The brute force configuration had 6 backbone routers; 

now only one at each physical site is used. 60 
There is one Framc Rclay connection and local loop per 

physical site. 

The FDD I ring at Corporate has been changed so that 
traffic for both Alpha and Beta can flow over it 65 

Connectivity between the different divisions takes place 
through Virtual Links within the backbone router at 



Corporate. Filters on (he Virtual Links arc used to 
enforce access policy. 

The Corporate network, lies within a Virtual Router of its 
own, for administrative convenience. 

Even the network shown in FIG. 16 contains more equip- 
ment than is strictly necessary. Note that multiple routers arc 
still present at each site; one for the "backbone" and one 
which is owned by the maintenance personnel of each 
division. If these disparate network management groups 
become sufficiently trusting (or consolidated} that they can 
be persuaded simply to leave other Virtual Routers alone 
when configuring their network, then the configuration can 
be reduced to the consolidated block diagram shown in FIG. 
17. To reach this configuration, the redundant routers have 
been eliminated and the Corporate FDD! ring has been 
replaced with a set of fiber optic repeaters. 

Now different groups share the same router and exercise 
their differem concerns. Is such mutual trust warranted? 
Again, this brings up the difference between security and 
integrity— integrity against unintended alterations since 
each group is dealing with an independent set of IP protocol 
stacks, management software, and interfaces, and they have 
no excuse to tinker with those belonging to others. Their 
interests only conflict when modifying the physical health of 
the common Frame Relay network they share. However, 
security is not provided in that one group is not immune 
from the malicious intent of the other. 

Hopefully, these example have shown that there is a new 
net working problem beginning to emcrge-thc problem of 
networking networks, rather than networking hosts as in the 
past Just as peer to peer host networks required a different 
model of what networks were about at the time if its 
introduction, the interconnection of networks also requires 
new tools and approaches to be properly implemented. 

With the tools discussed above and further discussed 
below in detail, the present invention provides solutions for 
this hew problem. Additional tools will be required in the 
future to accommodate exciting new technologies such as 
wireless, public networks for mobile computing; however, 
with the proper foundations provided by the present invent 
Uon it should be readily understood how to deal with such 
new technologies as they arc developed and implemented in 
the data networking environment. 

Referring to once again to FIG. 1, a preferred embodiment 
of the present invention which provides a packet processing 
system 150 which contains virtual switches 152, 154, and 
156 within physical switching systems ISO that direct the 
flow of protocol data units into inbound interfaces 102 and 
out of outbound interfaces 110 in a data communication 
network is shown. This is similar to the partitioning of a 
large shared network hard disk into several disk partitions 
and restricting access by. different users to different partition. 
For example, a 750 Megabyte hard drive can be partitioned 
into three 250 Megabyte partitions. Further, each partition 
can be password protected so that only users which know the 
correct password have access to that hard disk partition. All 
members of a Closed User Group would know the correct 
password for the: partition assigned to that Closed User 
Group and no one outside of that group would know the 
correct password. 

In a similar manner, the present invention uses Closed 
User Groups to provide access to a shared medium data path 
158. This access is accomplished by providing protocols, 
algorithms, and bridge/router architectural designs that arc 
capable of processing packets at multi-gigabyte rates while 
maintaining appropriate access policies and/or network 
security measures. By using all of these principles, the 
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present invention reduces (he cost of providing these packet with the same virtual switch 152 which received the par- 
switching services by enabling a single physical data switch ticuiar protocol data unit 140. 

150 to be di vided into two or more virtual switches 1 52, 154, Further, it is desirable for the management apparatus 164 
and 156 which individually process packets from different to have a reassigning mechanism 168 for changing a set 
Closed User Groups. With reference to the hard disk parti- 5 assignment of particular data interface 118 such that the 
turning analogy, the following present invention detailed particular data interlace assignment 170 can be moved 
description provides a set of operating techniques, . device between the virtual switching devices 152 and 154 as needed 
architectures, and constraints necessary for partitioning a (i.e., the data port 160 can be moved), 
communication network switch, like a hard disk, so that Furthermore, it is necessary for the management appara- 
diffcrent Closed User Croups can have access to ditTerem jo tus 164 to maintain a database 172 of known destination 
partitions (i.e., virtual switching devices) while ensuring that identifiers and to require verification that the destination 
access to the different partitions is limited to members of the identifier in the particular protocol data unit 140 is in the 
Closed User Groups. database 172 prior to inserting the particular protocol data 
In a preferred embodiment of the present invention shown unit 140 into an outgoing data stream on another data port 
in FIG. 2, a physical switching device 150 for use in a is 162 such that delivery of the protocol data unit 140 to an 
communicaiion network to switch OSI network layer pro- unknown destination identifier is prevented 
tocol data units within the communication network is pro- Each virtual switch processor 108 preferably performs 
vided. The physical switching device ISO includes at least a restructuring and/or mouitoring operations on the particular 
first 152 and a second 154 virtual switch. Each virtual switch protocol data unit 140. The restructuring operations include 
152, 154 includes a decision mechanism 104 for dctermin- 20 deleting, inserting, and/or replacing bits in the particular 
ing an associated directive based on a destination identifier protocol data unit 140 in accordance with the associated 
within a particular protocol data unit 140 received at a data directive prior to inserting the particular protocol data unit 
port 160. A processor 108 is opcratively coupled to each 140 into the outgoing data stream. The monitoring opera- 
virtual switch 152, 154 to insert the particular protocol data tions include dropping, sending, sending a copy of, andror 
unit 140 into an outgoing data stream on another data port is auditing the contents of the particular protocol data unit 140 
162 according to the associated directive to enable delivery in accordance with the associated directive prior to inserting 
of the protocol data unit 140 to the destination identifier. the particular protocol data unit 140 into the outgoing data 
These data ports 160, 162 arc associated with a set of data stream. 

interfaces 112, 114, 116, 118. 132, 134, 136, and 138 In accordance with an alternative embodiment of the 

selected from, a plurality of data interfaces in a physical 30 present invention shown in FIG. 3, a physical switching 

commuracatfon network switch ISO. The set of data inter- device 150 for use in a communication network to switch 

faces 112. 114, 116, 118, 132, 134, 136. and 138 is assigned protocol data units within the communication network on a 

exclusively to a unique virtual switching device 152. These - shared communication medium is provided. The physical 

data ports 160, 162 can take many forms, including but not switching device 150 includes at least a first 152 and a 

limited to, a data interface 112 on the physical switch 150, 35 second virtual switch 152 which is similar to that which was 

a lime slot out of several time slots in a time-divided frame described in the preferred embodiment of the present inven- 

rcccived at a data interface 112 (e.g., an FDDJ time roulti- Uon; however, the management apparatus is different. This 

plcxed optical fiber) on the physical switch ISO. and a code different management apparatus is a virtual link manage- 

divided cell out of several code divided cells received at one mcnt apparatus 174 which is operaiiveiy coupled to the 

or more data interface 112 (e.g.. in ATM cells may be sent 40 virtual switches 152, 154. The virtual link management 

over several different paths and reassembled in a sequence apparatus 174 maintains information on at least one virtual 

based on a cell identifier within the cell header information) link 176 between at least the first 152 and the second 154 

on the. physical switch 150. In addition, two or more data virtual switches. The virtual link 176 has a first end 178 and 

ports 195 and 197 can be associated with one or more data a second end 180 of a data path 182 on the shared cornmu- 

inicrfaccs and retrieve protocol data units from the data 45 nication medium 158. 

interface data stream for each data port 195 and 197 based The virtual link 176 provides a data path 182 between the 

on unique attributes (eg., destination identifiers) associated first 152 and the second 154 virtual switches on the shared 

with a particular data port. communication medium 158. The first 152 and the second 

The physical switching device 150 preferably is designed 154 virtual switches preferably arc located in a single 

to accommodate data interfaces of differing types such that so geographic location (i.e., within the same network hardware 

the set of data, interfaces assigned to a virtual switch 152 device rack) and the shared communication medium 1S8 

may include a first data interface 114 which manipulates a preferably is a memory shared between the first 152 and the 

protocol data unit having a different protocol type from a second 154 virtual switches. 

second data interface 116 such that protocol data units of Alternatively, the first 152 and the second 154 virtual 

different protocol types can be switched within a single 55 switches may be geographically remote from one another. In 

virtual switch 152. The different protocol data unit protocol addition, the first 178 and the second 180 virtual link ends 

types may differ by having differing OSI physical layer may be in a single set of data ports assigned exclusively to 

media types, differing OSI link layer signaling protocols, the first 152 and the second 154 virtual switches such that 

and/or differing OSI network layer protocols. the virtual link 176 provides a data path 182 between the first 

A management apparatus 164 is opcratively coupled to 60 152 and the second 154 virtual switches on the shared 

each virtual switch 152, 154 to maintain information on an communication medium 158 across a geographic distance, 

association between the plurality of data interfaces and the In this alternative arrangement, the shared cornmuhication 

virtual switches. The management apparatus 164 includes a medium 158 preferably consists of a high data transfer rate 

controller 166 dependent on the association information for link between the first 152 and the second 154 virtual 

limiting the processor 108 of each virtual switch 152, 154 to 65 switches which spans the geographic distance, 

only inserting the particular protocol data unit 140 into an In addition, filters 184 and .185 (associated with virtual 

outgoing data stream on another data port 162 associated switch 152 and 154, respectively) may be opcratively 
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coupled to the data path 182 which fillers protocol data units 
communicated in the virtual link data path 182. Each filter 
184 or 185 performs filtering operations according to one 
access policy out of a plurality of access policies thai are 
separately specified for each virtual switch. 5 

The present invention may also be described in reference 
to yet another preferred embodiment shown in FIGS. 2 and 
4. Referring to FIG. 4, a communication system 190 which 
delivers OS1 network layer protocol data units within a first 
186 and a second 188 virtual closed user group on a shared 10 
communicaiion medium 158 is provided. It will be noted 
that the shared communication medium 158 may include a 
variety of physical communication media (as shown in FIG. 
4), in addition to other intermediate network bridges, routers 
and the like. The communication system 190 includes a first 15 
virtual closed user group processor 152 for examining and 
modifying data bits within a protocol data unit received from 
a member of the first virtual closed user group 186 on the 
shared communication medium 158. Each member of the 
first virtual closed user group 186 has a unique destination 20 
identifier. As shown in FIG. 2, the first virtual closed user 
group processor 152 includes a delivery mechanism 108 for 
delivering the modified protocol data unit 140' to another 
member of the first virtual closed user group 186. 

As shown in FIG. 4, the communication system 190 also 25 
includes a second virtual closed user group processor 154 
which is similar to the first virtual closed user group pro- 
cessor 15Z The second virtual closed user group processor 
154 examines and modifies data bits within a protocol data 
unit received from a member of the second virtual closed 30 
user group 188 on the shared communication medium 158. 
Also, each member of the second virtual closed user group 
188 has a unique destination identifier. In addition, as shown 
in FIG. 4, the second virtual closed user group processor 154 
includes a delivery mechanism 108' for delivering the modi- 35 
fied protocol data unit 141' to another member of the second 
virtual closed user group 188. 

A framer 164 is operalivciy coupled to the first 1S2 and 
the second 154 virtual closed user group processors to 
maintain a database 192 of all destination identifiers cur- 40 
rcntly reachable for delivery of protocol data units within the 
communication system 190, This framer 164 preferably 
requires verification that each destination identifier in a 
protocol data unit on the shared communication medium 158 
can be currently reached for delivery through a lookup in the 45 
database 192, prior, to completing delivery of the protocol 
data unit to the associated destination identifier. The framer 
164 preferably further limits access to the database 192 such 
that each virtual closed user group 186, 188 only has access 
to specific destination identifiers owned by that particular 50 
virtual closed user group 186 or 188 so that a protocol data 
unit having a destination identifier which is not owned by the 
particular virtual closed user group 186 or 188 will not be 
delivered. 

Each virtual closed user group processor 152, 154 modi- 55 
fics and/or monitors protocol data units. The processor 152 
modifies data bits within a received protocol data unit by 
deleting, inserting, and replacing bits in the received proto- 
col data unit prior to delivering the modified protocol data 



destination within the same virtual closed user group with- 
out modifying the predctennined OSI physical layer, link 
layer, and network layer access protocols used to commu- 
nicate protocol data units over the shared communication 
medium. This provides seamless integration of this closed 
user group functionality to LAN managers even though the 
LANs may be operating within a MAN as separate closed 
user groups. This lack of modification of the access proto- 
cols also has the advantage of enabling each virtual closed 
user group processor 152, 154 to allow any particular device 
capable of communicating on the shared communication 
medium (e.g.. port with a destination identifier) to be a 
member of cither virtual closed user group by having the 
framer 164 limit database 192 access to destination identi- 
fiers associated with a particular destination within a par- 
ticular desired virtual closed user group. 

The framer 164 preferably also includes a mechanism for 
assigning incoming protocol data unit traffic to each virtual 
closed user group 186, 188 based on ah access policy that is 
separately specified in each virtual closed user group. 

In the preferred embodiment communication system 190 
operations of the first 152 and the second 154 virtual closed 
user group processor arc performed by a first 152 and a 
second 154 virtual switch, respectively. Each virtual switch 
152, 154 includes a decision mechanism 104, 104' for 
determining an associated directive based on a destination 
identifier within a particular protocol data unit 140, 141 
received at a data port 160, 194. In addition, each virtual 
switch 152, 154 includes a processor 108, 108' which 
performs the functions of the virtual closed user group 
delivery mechanism by inserting the particular protocol data 
unit 140. 140* into an outgoing data stream on another data 
port 162 or 196 according to the associated directive to 
enable delivery of the protocol data unit 140 or 141 to the 
destination identifier within the protocol data unit. 

In an alternative embodiment to this preferred embodi- 
ment described in reference to FIGS. 2 and 4, the operations 
of die first virtual closed user group processor 152 arc 
divided between a first and a second virtual switch. This 
spreads the processing load between two virtual switches 
and lakes into account typical communication system con- 
figurations which have many geographically separate physi- 
cal switches 150. 150' devoted to the same closed user group 
(eg., group 186). 

In either embodiment, the first 152 and the second 154 
virtual switch may be located within a single physical 
switching device 150. These data ports 160 and 162 as well 
as 194 and 196 for each virtual switch arc then from a set of 
data interfaces in the physical switching device 150 assigned 
exclusively to the same virtual switch 152 and 154, respec- 
tively. 

Also in either embodiment, the first 152 and the second 
154 virtual switches may be located within different physical 
switching devices 150 and 150\ These data ports 160 and 
162 as well as 194' and 196' (data ports 194' and 196' for 
virtual switch 154' are not shown, but arc the same as those 
shown in FIG. 2) for each virtual switch are then from a set 
of data interfaces in the respective physical switching 
devices 150 and 150" which are assigned exclusively to the 



unit to another member of the same virtual closed user 60 same virtual switch 152 and 154'. As noted above, the 



group. The processor 152 monitors the received protocol 
data unit by dropping, sending, sending a copy of, and 
auditing the contents of the received protocol data unit prior 
to delivering the modified protocol data unit to another 
member of the same virtual closed user group. 65 

In addition, each virtual closed user group processor 152, 
154 may deliver the modified protocol data unit to another 



different physical switching devices 150 and 150' may be 
geographically remote from one another. 

As previously noted, these data ports 160, 162, 194, and 
196 may be either a data interface 112 on a physical 
switching device 150, a time slot out of several lime slots in 
a lime-divided frame received at a data interface 112 on a 
physical switching device 150, or a code divided cells out of 
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several code divided cells received ai ai least one data 110 are configured differently depending on the type of 

interface 112 on a physical switching device 150. In addi- communication network that the forwarding device 108 is 

lion, two or more data ports 195 and 197 can be associated connected to as well as the particular location within such a 

with one or more data interfaces and retrieve protocol data network that the forwarding device 108 is located, 

units from the data interface data stream for each data port 5 Turning now more specifically to FIG. 5, an example of 

19S and 197 based on unique attributes (e.g., destination how the decision mechanism 104 may be implementing 

identifiers) associated with a particular data port. within the forwarding device 108 is shown. The prcproccs- 

In addition, as previously noted, the physical switching sor 104 (Le„ one possible form of decision mechanism 104) 

device 150 preferably is designed to accornmodate data includes an identifier 122 which determines media header 

interfaces capable of manipulating different protocol types 10 information of a protocol data unit received from over the 

such that each set of data interfaces assigned to a virtual communication network. The identifier 122 preferably ana- 

switch 152 may include l wo or more data interfaces 114,116 lyzes the inbound stream of data bits from the inbound 

having mechanisms for manipulating protocol data units interface 102 to find media header information of a protocol 

having different protocol types and the virtual switch 152 is data unit 140 received from over the communication net- 

configured to switch protocol data unit coming from these is work. In addition, a validation mechanism 124 is opcrauvcly 

data interfaces 114, 116 with different mechanisms. The coupled to the identifier 122 to validate the media header 

differences in the protocol data unit data protocol types may information. Also, a modifier device 126 is operalively 

include differing OS! physical layer media types, differing coupled to the identifier 122 to add next operation informa- 

OSI link layer signaling protocols, and/or differing OSI tion in the form of an associated directive 142 to the media 

network layer protocols, 20 header information based upon the determined media header 

Also, as previously noted. Each virtual switch processor information such that subsequent processing of the protocol 

108 modifies and/or monitors protocol data units. data unit 140 by a protocol data unit forwarding processor 

In addition, the communication system 190 may include 108 is reduced. This next operation information preferably 

a virtual link 76 between the first 152 and the second 154 includes bits necessary to enable the use of two or more 

virtual switches. This virtual link 176 consists of a first end 25 virtual switches inside a single physical switching device. 

178 and a second end 180 of a data path 182 on the shared The modified media header information including the asso- 

communication medium 158, where each end 178, 180 is a dated directive 142 along with the remaining portion of this 

data port in a different virtual closed user group 186, 188. To particular protocol data unit 140 are then stored in a memory 

enforce access policies a pair of filters 184 and 185 may be buffer 106 until the forwarding processor 108 is able to 

operalively coupled to the data path 182 to filter protocol 30 process this particular protocol data unit. The forwarding 

data unils communicated in the data path 182 based on processor 108 is opcrativcly coupled to the preprocessor 104 

individual access policies that are separately specified for and the memory buffer 106 to forward the protocol data unit 

each virtual closed user group. 140' without the modified media header information in the 

The present invemion virtual switching apparatus and communication network based upon the next operation 

method arc integrated into a particular communication net- 35 information contained in the associated directive 142. It 

work device thai forwards packets. The following discussion should be noted that the next operation information will 

details this integration; however many of the forwarding differentiate between protocol data units for the first 152 and 

operations arc more thoroughly discussed in ihc previously second virtuals switches 154, and may include header modi - 

identified related U.S. patent application Scr. No. 08/366, fication or truncation of the protocol data unit 140 prior to 

221 entitled "Method And Apparatus For Accelerated Packet 40 forwarding. The memory buffer 106 works in conjunction 

Forwarding". with the forwarding processor 108 and ihc outbound intcr- 

Rcferring to FIGS. 2 and 5, a preferred embodiment of a face 110 10 accomplish this task, as preferably as a real-time 

forwarding system 100 in which a protocol data unit pre- operation. 

processor 104 (also termed a fast packet processor (FPP)) is The media header information typically includes at a 
used in a protocol data unit forwarding device 108 that 45 minimum the encapsulation type, protocol type, frame type, 
operates in a communication network to transfer protocol media destination, and source route information. This infor- 
data units (c.g„ 140) within the communication network. mation is used by the modifier device 126 to add next 
The forwarding device 108 manipulates bits of information operation information 142 which specifies a particular 
at the OSI network, link and physical layers and preferably operation such as route, bridge, or source route bridge to 
performs as one or more network devices including, bul not » perform on the received protocol data unit It should be 
limited to, a bridge, a router, a switch, a line filter, a protocol noted that a media destination may be multicast, a unicast 
converter, an encapsulating device, and a security device. It match, or a unicast non-match destination, 
will be appreciated that various types of communication In order to accelerate the forwarding of a received pro- 
networks exist which utilise forwarding devices that per- tocol data unit 140, the identifier 122 preferably is config- 
form these functions including local protocol data unit 53 urcd to determine the media header information after having 
source devices (eg., desktop computers or workstations), received only a portion (i.c, the first several bits or bytes) of 
local area networks, wide area networks, metropolitan area the protocol data unit 140. Similarly, the modifier device 126 
networks, and wireless networks. Also, it will be appreciated preferably is configured to add next operation information 
by those skilled in the art that the forwarding device 108 142 to the media header information after having received 
may perform other net work-based functions without depart- 60 only a portion of the protocol data unit 140. Both of these 
ing from the scope and spirit of the present invention. In optimizations are particularly important when manipulating 
addition, other types of data in the communication network large protocol data traits which are simultaneously received 
could readily be manipulated by the forwarding device 108. from various incoming interfaces 102. 

The forwarding device 108 includes an inbound interface The preprocessor 104 preferably includes a mechanism 

102 and outbound interface 110 which control the flow of 65 for aligning the contents of buffer memory 106. This can be 

protocol data units 140 and 140' into and out of the for- accomplished by the modifier device 126 padding bytes of 

warding device 108, respectively. These interfaces 102 and data to the protocol data unit 140 such that the header 
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information is aligned on optima! boundaries. The reasons 
for doing this optimal boundary alignment are discussed in 
the following sections. 

The preprocessor 104 identifier 122 preferably includes 
an address lookup mechanism for obtaining various 5 
addresses required by the preprocessor 104 through the use 
of a content addressable memory 128 (CAM) located in the 
forwarding processor 108. The addresses can be obtained 
through several types of algorithms. For example, a network 
destination address of the protocol data unit 140 can be to 
compared to a prcdctcimined list of known network desti- 
nation addresses. Also, a media destination address of the 
protocol data unit 140 can be compared to a predetermined 
list of known media destination addresses. Further, a media 
source address of the protocol data unit 1 40 can be compared \ s 
to a predetermined list of known media destination 
addresses. Furthermore, a media source address of the 
protocol data unit 140 can be compared to a predetermined 
list of known media source addresses. 

The preprocessor 104 identifier 122 also preferably 20 
includes a source route bridge destination lookup mecha- 
nism for checking for specifically routed protocol data unit 
140, finding next local area network identifier in a source 
route of the protocol data unit 140, and comparing the next 
local area network identifier to a predetermined list of is 
known local area network identifiers by utilizing the GAM 
128. 

The present invention also can be described in reference 
to; a device-implemented method steps 200-218 shown in 
FIG. 6 to deliver protocol data units within a first 186 and 30 
a second 188 virtual closed user group on a shared commu- 
nication medium 158 in a communication system 190 (i.e., 
shown in FIG. 4). This delivery method includes maintain- 
ing 202 a database of all destination identifiers currently 
reachable for delivery of protocol data units within the 35 
communication system. Access to this database is limited 
204 such that each virtual closed user group only has access 
to specific destination identifiers owned by thai particular 
virtual closed user group. Incoming traffic is assigned 206 to 
each virtual closed user group based on an access policy that <o 
is separately specified in each virtual closed user group. The 
access policy may be as simple as having all members with 
last names beginning with the letters A-l being placed in one 
group and all others being placed in another. Further, the 
access policy may be more complex. For example, member 45 
group assignment could be based on an IP address, plus a 
known security clearance level, and a time of day to which 
access is limited (i.e., only during standard working hours). 

At this point, the operations arc split between the first and 
the second virtual closed user groups such that any further so 
processing is performed separately. Data bits within a pro- 
tocol data unit received from a data interface on the shared 
communication medium are examined and modified 208 
wherein the protocol data unit has a unique destination 
identifier associated with the first virtual closed user group 55 
to form an associated directive for that proioco! data unit. In 
a similar manner, data bits within a protocol data unit 
received froni a data interface on the shared communication 
medium arc separately examined and modified 208' when 
the protocol data unit has a unique destination identifier 60 
associated with the second virtual closed user group to form 
an associated directive fur that protocol data unit Each 
member of the second virtual closed user group also has a 
unique destination identifier. 

Also, verification 210 and 210* thai each destination 65 
identifier in a protocol data unit on the shared communica- 
tion medium is currently reachable by. the particular virtual 
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closed user group for delivery is required This verification 
may be accomplished through a lookup in the database prior 
to completing delivery of the protocol data unit to the 
associated destination identifier. If a destination identifier is 
not found in the database, three possible actions can be 
taken, including: dropping the associated protocol data unit 
so that no delivery occurs, forwarding the associated pro- 
tocol data unit to another destination identifier, or adding this 
non- verified destination identifier to the database. This last 
possible action also has other benefits in that any particular 
device capable of communicating on the shared communi- 
cation medium can be a member of cither virtual closed user 
group by simply adding 212 or 212' a destination identifier 
associated with the particular device newly attached to the 
communication network to the database and associating the 
device with the first or the second virtual closed user group* 
respectively. 

Subsequently, the first virtual closed user group modified 
protocol data unit is delivered 214 to another member of the 
first virtual closed user group after verifying that the first 
virtual closed user group member destination identifier is 
currently reachable. In addition, the second virtual closed 
user group modified protocol data unit is delivered 214' to 
another member of the second virtual closed user group after 
verifying that the second virtual closed user group member 
destination identifier is currently reachable. 

These device-implemented steps 200-218 preferably arc 
performed such that all predetermined physical layer, link 
layer, and network layer access protocols used to commu- 
nicate protocol data units over the shared communication 
medium arc preserved. In other words, no changes to 
protocol like IP, ATM, OC-12 or the like are necessary to 
implement the present invention, because these steps: arc 
seamlessly integrated with this access protocols. 

In addition, the device-implemented steps may include a 
step of providing 216 a virtual link between the first and the 
second virtual closed user group. This virtual link can be 
used to deliver protocol data units from the first virtual 
closed user group and to the second virtual closed user 
group. The virtual link includes a first end and a second end 
of a data path on the shared communication medium. Also, 
each virtual link end includes a data port in a different virtual 
closed user group. A shared memory can be used as the 
shared communication medium to provide the virtual link. 
Alternatively, a high data transfer rate link which spans a 
geographic distance between the first and the second virtual 
closed user group can be utilized to provide the virtual link. 
A filtering process can be performed on the virtual link such 
that protocol data units communicated in the virtual link data 
path are filtered according to an access policy that is 
separately specified in each virtual closed user group. It will 
be appreciated by those skilled in the art that another virtual 
link may be provided to deliver protocol data units from the 
second virtual closed user group to the first virtual closed 
user group. 

Mode for Canying Out the Invention 

The following sections describe in detail the features 
required for the virtual router/switch. It should be noted thai 
the packets described herein refer to protocol data units 
which can take the form of a packet, cell, or frame of data. 
The Virtual Router feature provides a means of segregating 
Upper Layer Protocols and their ports into several groups or 
"virtual" routers. These virtual routers can function almost 
totally independent of one anodicr preventing traffic mix, or 
allowing controlled access amongst one another. 
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The following describes the customer viewable aspects of 
the Virtual Router. This includes the Virtual Router (VR) 
component and all of its immediate subcomponents. In 
particular, the following details regarding the VR are 



Component Definitions; 
Provisionablc attributes; 
Operational attributes; 

Provisioning commands; and lQ 
Provisioning procedures. 
Some of the primary benefits of the Virtual Router include: 
Multiple Virtual Routers per platform 
Service Providers: Provides ability to share the 
resources of one platform across many customers, is 
Obvious benefits include cost reduction and inte- 
grated maintenance, 
targe Enterprises: Provides ability to segregate local 
traffic and resources between organizations while 
sharing the more expensive long haul resources 20 
among organizations. Again benefits here include 
centralized maintenance and reduced cost. 
Controlled interaction between Virtual Routers— The VR 
provides for traffic segregation and controlled integra- 
tion. Integrated traffic can be precisely controlled 25 
regarding its source, destination among many other 
possibilities. 

Single maintenance platform — Provides a constant and 
integrated management interface for each Virtual 



media. Each PP must be linked to a Media Application 
component The linkage between PPs and Media Applica- 
tion components is a one to one linkage. 

An example of a component hierarchy including three 
Virtual Routers and multiple protocol stacks and protocol 
ports is shown in FIG. 18. The VR has many subcomponent, 
many of which also have subcomponents. FIG. 19 is a 
diagram which sliows the entire component hierarchy under 
the VR. The bold or darker tone components are fully 
defined in these sections. 

VR PPs support both LAN and WAN media. For LAN 
media, the PP is linked, via a CAS linkage, directly with the 
LAN Application component This linkage defines the 
physical port which the PP is associated with. 

For WAN media, the linkage from PP to WAN Applica- 
tion varies depending on the Link Level Protocol (LLP) 
type. This feature supports two very different types of LLP 
types. One type of LLP is a Point to Point LLP. A Point to 
Point (PPP) LLP type provides a 1 to 1 connectivity model. 
That is each end of the link supports only one end destina- 
tion. The WAN Applications which use this model include: 
Point to Point Protocol (PPP) and Vitalink Control Protocol 
(VCP). FOr these LLP types, the PP is linked directly with 
the Application component, e.g. PPP or VCP. 

The second type of LLP supported by the VR system is 
the Multi-point LLP. The multi-point LLPs allow for one 
interface to be multiplexed into multiple data carrying pipes, 
each capable of supporting multiple end destinations. 'Itie 
WAN Applications which use this model include: Frame 



Router on the platform. This simplifies the manage- 30 DaIa T *™™1 Equipment (DTE), X.25 (DTE), and 



mcnl of the set of VRs. 

The Virtual Router (VR) provides the customer with the 
ability to segregate router traffic and maintenance into what 
appears to be separate physical routers. This is accomplished 
by the creation of multiple instances of the VR component 35 
directly under CASROOT. 

Each instance of the VR component provides support for 
multiple network protocols, routing protocols and media 
devices to operate virtually independently of each other. 

The VR system includes the VR component and many 40 
other subcomponents. These sections provide the complete 
specifications of the following components: 

Virtual Router; 

Protocol Port; and 45 

Memory Management. 
These sections describe the subcomponents under the VR, 
including the number and type of subcomponents which can 
exist directly under the VR and Protocol Port (PP) Compo- 
nents, 50 

the Virtual Router component resides directly under 
CASROOT. Multiple instances of the VR component may 
exist. Components which reside under the one VR compo- 
nent arc independent of components under another VR. The 
network protocol and protocol port components reside under 55 
the VR component. This allows multiple instances of pro- 
tocol stacks to exist on one platform. The network protocol 
component represents an instance of that particular protocol 
and all of its configured data. 

Protocol Ports (PPs) are created under the VR and rep- eo 
resent a logical interfaces to a network. There can be 
muluplc protocol ports under each VR, each having any 
number of protocols enabled. To allow for the processing of 
particular OSI Network Layer Protocol packets on a PP, a 

Network Protocol Port subcomponent is created under the 65 AppJetaJk Port component under each PP. 



Switched Multimegabit Data Service (SMDS) (DTE). For 
all of these LLP types, the PP is linked with a RcmoteGroup 
subcomponent which resides directly under the Applicauon 
Component. 

Networking Protocols (e.g., IP, IPX, etc.) are supported 
via CAS components which reside directly under the VR 
component and a Network Protocol Port components which 
resides directly under the PP component. There can be at 
most, one instance of each Network Protocol component 
under each VR component and one instance of each Net- 
work Protocol Port component under each PP. These sub- 
components provide the functionality required to provide 
packet processing support for each Network Protocol Type. 
It is required that for each Network Protocol Port which is 
provisioned under a PP, that the associated Network Proto- 
col component exist under the VR. 

IP is supported per VR with an Ip component and an 
IpPort component There can be at most one lp component 
under each VR and one IpPort component under each PP. 
Support for multiple IP addresses per TP protocol port is 
provided by a subcomponent under the IpPort component 
This componcm contains a list of "$000™!^'' IP addresses 
which arc associated with the IpPort. Routing Protocols 
(e.g., OSPF and Exterior Gateway Protocol (EGP)) arc 
supported via CAS components which reside directly under 
the IP subcomponent. Thus the creation of a IP component 
also provides for the creation of these routing protocols. 

IPX is supported per VR with an Ipx component and an 
IpxPort component. There can be at most one Ipx compo- 
ncm under each VR, and one Ipxpon component under each 
PP. 

Applctalk is supported per VR with an Appletalk com- 
ponent and an ApplctalkPort component. There can be at 
most one Applctalk component under each VR, and one 



PP. A CAS linkage, from the PP to a Media Applicauon 
component is used to associated the logical PP to a physical 



Dccnct is supported per VR with an Dccnct component 
and an DecnctPort component There can be at most one 
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Dccnct component under each VR. and one DccnctPort 
component under each PP. 

Bridging is supported via the Bridging CAS component 
which resides directly under the VR component. There can 
be at most, one instance of a Bridging component under each 5 
VR component. The creation of a Bridging component under 
a VR component, allows for the creation of a Bridgeport 
subcomponent under the PP component 

Ouster bridging provides the ability for a group of LAN 
ports to be bridged for all media, while treating the group of 10 
ports as one port which can be used for Telnet and manage- 
ment purposes. Cluster bridging is supported by the VR 
using two existing components and one new component 
The existing Bridge component is still used under each VR 
to perform the bridging activities. The BridgcPort compo- 15 
ncnt is used to enable bridging on a PR This component is 
used to enable bridging on a standard bridged port and to 
enable cluster bridging on a cluster bridged protocol port. A 
standard bridged port is linked to a LAN application which 
identifies the physical interface which is being bridged. A 20 
cluster bridge PP is linked to a new component called a 
ClustcrBridge. This component represents the cluster bridge 
logical interface and it is what distinguished a PP as being 
a duster bridge PP. The ClustcrBridgc Application compo- 
nent resides directly under the VR. A PP linked to a 15 
ClustcrBridgc Application component (versus a LAN appli- 
cation component) represents a QustcrBridgc port This port 
acts as a gateway for all bridged HP traffic to routing, and 
from routing io all bridged PPs. 

Multiple cluster bridge ports may be defined, using mu]» 30 
tiple instances of the ClustcrBridgc application. Each 
bridged port can belong to at most one ClustcrBridgc. Each 
Bridgeport, including cluster bridge PPs. have a domain 
attribute which identifies the bridge domain that is used by 
bridging. The bridge domains must be unique per cluster 35 
bridge Port The bridge domain is what aeternuncs which 
bridge pons arc associated with specific instances of the 
CiusterBridgc. For example, all bridged ports with domain 
5 arc associated with the single cluster bridge port with 
domain 5. 40 

FIG. 20 is an example of multiple cluster bridges, each 
associated with one bridge PP. Notice the domain numbers 
for the bridged ports and the cluster bridge ports. Bridged 
PP/0 is associated with cluster bridge PP/l and bridged PP/3 
is associated with cluster bridge PP/2. 45 

SNMP is one method which can be used to manage the 
physical and virtual router platform. This method requires 
VR support for the SNMP agent(s) which reside under 
Access Control. The VR provides mechanisms which allow 
each VR to be managed virtually independently of one 50 
another. The SNMP support is provided on a per VR basis 
with respect the VR components and software. If SNMP 
support is required, an SNMP component can be provisioned 
under the VR component. This component contains the 
ifTable and SnmpSystcmGroup. The iflablc includes an 55 
ifTablc entries for each interface in the VR The SnmpSys- 
temGroup contains generic configuration information per 
VR for SNMP. 

The SNMP administrative status and OS1 slate must both 
be supported since it is desired to support both SNMP and 60 
OSl. The OS! state is purely an operational attribute while 
the SNMP admin. state is a provisionable attribute. This is 
the only difference between the SNMP admin state and OSJ 
admin state The issue here is how these states can affect 
each other and how they are to be dealt with. The particular 65 
state dependencies are well known in the art and for sim- 
plicity will not be repeated herein. 



The Packet Control Facility (PCF) provides a mechanism 
to monitor and control the flow of packets through the router 
platform. This facility is provided on a per VR basis. A PCF 
component can be produced under the VR which provides 
the mechanisms and functionality to create, and apply PCF 
filters. 

The following section will describe the memory manage- 
ment for the VR. The major concern for memory manage- 
ment (MM) is to prevent a VR or one of its Network 
Protocols from using so much memory that it begins to affect 
the other VRs or protocols adversely. A required Memory- 
Management component is created under the VR which 
allows for the configuration of Memory Management The 
memory management component allows for the manage- 
ment of both the VR and its Network Protocols. 

The memory management for the VR is primarily 
designed to prevent one VR from obtaining an amount of 
memory which adversely affects other VRs. MM attributes 
allow for a percentage of total heap space 10 be provisioned 
as the maximum amount of memory which the VR and its 
subcomponents can obtain. The total heap space for the 
system is calculated during initialization. It includes the 
amount of heap space remaining after the standard port of 
system initialization and prior to the initialization of the 
provision dependent processes. There arc no restrictions on 
the percentage of heap space any VR can allocate. In fact the 
total heap space for the platform may be overall ocatcd. For 
example, three VRs VR/0, VR/1 and VR/3 may each allocate 
50% of the heap space on the platform. Allowing this has 
some apparent advantages and disadvantages. An apparent 
disadvantage is that a VR may be denied memory before it 
reaches its maximum memory amount However, the maxi- 
mum memory amount is just that, a maximum and it is not 
to be implied that it is also a guaranteed minimum. An 
advantage of over allocating memory is that it allows for 
VRs to share heap space, on a first come first serve basis. 

When a VR attempts 10 allocate an amount of memory 
which would exceed the maximum allowed, it will be 
denied. In addition to the dental of memory, an alarm will be 
triggered. The alarms arc filtered such that no more than one 
alarm per VR will exist per period of lime. This period of 
time is a provisional attribute. 

The MM for a VR can be a very powerful tool in 
controlling the affects of an errant VR on other VRs. In order 
to efficiently provision the memory maximums, the user 
must know how much memory a VR is using under normal 
situations. To provide access to this data* operational 
attributes arc provided which lists the amount of heap space 
is currently in use per VR. 

Because the maximum share of memory is a provisioned 
attribute, it can be adjusted to include more memory or less 
memory. If the provisioned amount is increased, MM auto- 
matically adjusts the amount allowed to the VR and Proto- 
cols, If the amount of memory is decreased, no action is 
taken by MM to automatically retrieve memory from VRs 
which now exceed that amount. If it is necessary to reduce 
the amount of memory used by a VR or protocol, the VR can 
be administratively disabled and enabled. This restarts the 
VR, thus requiring them to adhere to the new provisioned 
values for maximum heap space usage. 

The memory management for Network Protocols work 
much like the MM for VRs. Separate attributes within the 
same MM allow for Network Protocol memory manage- 
ment A provisioned attribute for each protocol determines 
the percentage of heap each protocol can use. However this 
share, unlike the VR share, is in terms of VR heap space 
versus total heap space. So if a VR has a provisioned fair 
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share of 50%, and a protocol has a fair share of 50%. ihc 
protocol has at most, the capability of getting 259b of the 
total heap space of the system. 

The Network Protocol memory management includes the 
same type of alarm reporting and current memory usage 5 
counts as described above for the VR. Similar to the VR 
situation, if the provisioned share of memory used by a 
protocol is decreased, a protocol could be in violation of it 
share of the memory. Although it has more memory than it 
should have, all subsequent requests for memory will be 10 
denied; If it determined that this is a problem* the situation 
can be corrected by disabling the protocol and re-cnabling it. 
Otherwise the protocol may be in violation until either the 
protocol reduces it memory consumption for another reason, 
or the system reboots. 15 

A MemoryManagement component exists under the VR 
to contain all the attributes associated with VR and Network 
Protocol memory managemcni. The MemoryManagement 
component is a required subcomponent, which has default 
values for. each of its attributes. 20 

These sections detail the ability to support multiple VRs 
on one router platform. In addition, it also provides a means 
Of internally connecting tlicsc VRs such that they can 
transmit packets between one another. This capability is be 
referred to as inter- VR support and is shown in FIG. 21. 25 

In the standard intra- VR case, a VR protocol port is linked 
to a media application component. This linkage explicitly 
defines the physical. port, and implicitly the FP, the logical 
port is associated with. 

In the intcr-VR case, the PP has no physical port or media 30 
which connects the two VRs, A mechanism must be devised 
to replace the functionality provided by the physical port and 
connection. The two most obvious alternatives were to either 
connect the VRs via a Virtual LAN media ora Virtual Point 
to Point Link media 35 

An inter- VR connection can be achieved by creating two 
protocol pons, one on each VR, and connecting them via a 
Virtual Link component. The two protocol ports connected 
to the Virtual Link component are considered intcr-VR 
(IVR) PPs. Although the Virtual Link is a logical mcdiun <o 
versus a physical medium, it is what is used to interconnect 
the two VRs. 

Provisioning a Virtual Router consists of provisioning 
multiple components, most notably the Virtual Router (VR) 
as well as its subcomponents (Upper level Protocols, SNMP, <s 
Bridges and Protocol Ports). The Virtual Router is used to 
logically separate sets of protocol ports and protocols into 
what appear to be and act like distinct routers/bridges. Most 
of the components required to operate the platform as a 
router or bridge cither reside under the VR or arc linked to so 
the VR via a CAS linkage. This allows the creation of 
multiple instances of these components on a per Virtual 
Router basis. 

The Virtual Router (VR) component resides directly 
under CAS Root The base software set allows for the 55 
creation of only one VR. However since part of the optional 
software set, allows for multiple VRs, the VR must always 
have an instance identifier. Preferably the maximum number 
of VRs allowed is 16; however, this number is totally 
arbitrary and changing it to a larger or smaller number 60 
should be a trivial operation. The identifier for the VR is a 
string of up to 20 characters; 

To allow for inter- VR packet processing, VirtualLinks are 
used. A VirtualLink allows for the connection of at most two 
VRs. The VirtualLink component resides directly under 65 
CAS Root andean be linked to two Protocol Ports through 
a provisioning procedure. CAS checks ensure that both 
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linkages are established and that they are between two 
different VRs. 

The following caveats are a result of the implementation 
of the VR on this preferred embodiment router platform: 

The provisioning system is not VR centric— Because only 
one edit view exists for all CAS components, multiple 
VR provisioning sessions arc not possible. Addition- 
ally, CAS command security between VRs is not sup- 
ported. 

Resource Contention—Hardware and Software resources 
arc shared across VRs, thus certain conditions on one 
VR may affect the performance of another VR. 
Each instance of a Virtual Router requires the creation of 
many components and processes. This obviously has a 
significant impact on memory usage. Depending on may 
variables, including the number of protocols supported per 
VR, the number of Protocol Ports created and the size of the 
dynamic routing tables created based on the network design, 
the memory usage may vary. Thus the number of VRs which 
can be successfully provisioned and made operational is 
nondeterrra rustic. Several features which, if provisioned, 
may significantly affect the amount of memory used. The 
primary memory user is Multiple Virtual Routers. Each 
instance of a VR uses a significant amount of memory 
depending on the number of protocols, protocol ports and 
media types being used. 

The use of the following features may have create some 
level of performance degradation compared to the optimal 
performance characteristics: 
ClusterBridging— Because cluster bridging requires both 
a bridging and a routing step, the performance regard- 
ing forwarding a packet via a ClustcrBridge port can be 
reduce to half the normal rate. 
Inter- Virtual Router Packet Forwarding~~Thc process of 
forwarding a packet from one VR to another includes 
forwarding a packet out a IVR PP for one VR, in the 
TVRPP forthe destination PP and finally out a physical 
PP. This process includes at least two forwarding table 
lookups* and one mapping from the inbound VR to the 
outbound VR. This process in some cases can be split 
across FPs, thus incurring additional performance pen- 
alties. 

The following sections arc the System Description for the 
Virtual Routing System which provides for the creation and 
execution of multiple Virtual Routers on a physical router 
platform. It also includes what is called "Protocol Glue". 
This is the software which provides a common set of 
interfaces and support mechanisms for the Network Proto- 
cols to run within. 

The Virtual Router (VR) feature has two major parts. The 
first part, is to provide the functionality required to support 
multiple Virtual Routers on a single physical router plat- 
form. The second part is to provide a common set of 
interfaces and support mechanisms for the network protocol 
processes. 

The VR is primarily intended for customer premises 
applications where a single chassis may operate separate 
networks for multiple clients. This allows an internetwork- 
ing service provider to support multiple clients, multiple 
networks while sharing hardware. Traffic can be cross- 
connected between VRs using Virtual Links. Virtual Links 
act like Point to Point media for IntcrVirtual Router con- 
nections. 

In the following sections. Network Protocols, ULPs, and 
Protocols are used to refer to the same thing, (i.e., IP, IPX, 
Dccnet, AppleTalk, etc.). The terms Media Applications and 
Applications are used to describe the Media component 
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processes (t.c., Ethernet, FDDI, TokcnRing, FramcRelay, 
etc). The term "event" is used extensively throughout this 
section. An event identifies any external stimuli to a process 
or object. An event can be a Process Environment (PEV) 
message or a function call. The term Protocol Port (PP) is 5 
used extensively and it refers to PPs in general. There arc 
many different types of PPs, used in different components 
and processes in addition to the PP component itself. If 0 
specific PP type is being referred to, its specific type is used. 

The Virtual Router system consists 0 f several classes. The 
three major classes which represent PEV processes arc the 
\TiimalRoutcrProccss. Forwarding Age rttProcess and the 
NctworlcProtocolBascProccss classes. These processes arc 
shown in FIG. 22 along with the sub-processes which they 
interact with. In particular, the following sub-processes are 
shown: 15 

Component Administration System (CAS); 
Packet Control Facility (PCF); 
Process Control System (PCS); 

Component Name Server (CNS); 20 

Global Stats Manager (GSM); 

Global Cache Manager (GCM); 

Local Cache Manager (LCM); and 

Local Stats Manager (LSM). 25 

TTic YirtualRouterProcess class encapsulates the control 
processor (CP) data and functionality associated with each 
instance of the V R. Itvt VR processes reside on the CP. One 
VR process is created by CAS for each VR provisioned on 
the platform. The VR process creates network protocol 30 
processes for each provisioned Protocol under the VR. 

This class provides the mechanisms required to handle all 
CP related activities as required by the protocol processes, 
the protocol ports and other objects which require VR 
support. 35 

The Forwarding AgcntProccss class; provides the function- 
ality required by the VR system on each active Logical 
Processor (LP) on the router platform, including the CP. This 
class provides the process which acts as the VRs agent on the 
Logical Processors (LPs). The VR uses these processes in 40 
order to provide each LP with forwarding data and other 
irotialization required by the protocol. 

The Net worxProtocolBaseProccss Class provides a com- 
mon platform for which each network protocol process is 
built on. This platform provides a common set of interfaces 45 
to all processes interacting with the protocol processes. 
Having a common interface for all network protocols 
reduces the effort and complexity of system components 
which interface to all the protocol types. 

Protocol registration is initiated by the Network Protocol Si) 
processes. It is an indication to the VR thai the Protocol is 
active and wishes to begin receiving locally addressed 
packets. In addition to this, it provides the VR with Protocol 
spectflc forwarding information (transparent to the VR), 
which is required on the LPs for packet forwarding. This 55 
data is made available to the protocol specific data path 
objects on each LP via the VR/Forwarding Agent (FA) 
processes. Included in this Protocol registration message is 
the forwarding information, the process ID of the process 
which is to receive local packets for the protocol, and an 60 
indication of the state of the protocol (active/inactive). The ' 
protocolStatc is required since this message is being used for 
registration and deregtstration. 

Protocol processes require notification that the media 
inierfacc is available prior to initiating a bind request This 65 
notification originates from the Media Application compo- 
nent once instantiated. 



Media Application processes (e.g. ENET. FrameRelay, 
etc.) are created on LPs (in the general case) and on the CP 
(for the ClustcrBridge and Inter- VR Link cases) during CAS 
provisioning. These applications have CAS linkage to n PP. 
When a Media Application process becomes active, it reg- 
isters with the Virtual Router on the CP. Included in the 
registration message is the data required by the forwarding 
Data Manipulation Engine (DME) (i.e.. frame handler) 
regarding the physical interface type, maximum packet size, 
etc. 

Upon reception of the message, the VR saves ihc data 
regarding a PP in the VRs PP object This data is sent down 
to the FA and made available to the forwarding software. In 
addition to this, the VR sends a mcdiaAvai I ability message 
to each protocol which is provisioned trader this PP. Once 
this message is received by the protocol processes, they can 
bind to the PP. 

Protocol Port Binding is a procedure used by a network 
protocols 10 enable or start packet processing on a PP for a 
particular protocol type. For example, prior to IP binding to 
PP/5, all IP packets on PP/5 are cither bridged (if bridging 
is active) or dropped. Once IP binds to PP/5, IP packets arc 
processed by the IP forwarder. 

Because the forwarding software is on the LP and the 
network protocol processes arc on the CP, the VR provides 
a mechanism to support protocol binding. Binding is initi- 
ated by the network protocol process via a bind request 
delivered to the VR via a PEV message. The VR then 
determines which LP(s) the PP resides on, and forwards the 
Bind request to the appropriate FA(s). Bind data, passed by 
the network protocols, is used during the creation of the 
Bind Table Manage (BTM) on the LP. A BTM is required on 
each LP which can process inbound packets. For PP which 
have physical interfaces, the BTM is required on the LP 
where the physical interface resides. For PPs that have no 
physical interface (e.g. ClusterBridgc) and PPs that have 
multiple physical interfaces more than one LP requires a 
BTM. 

The FA, upon reception of the bind request, creates a 
BTM (if necessary) and delivers the bind request to it. In 
addition, a ProtocolPort object is created using the data 
included in the bind request by the protocol process. This 
ProtocolPort provides all the information required by the 
foiwarding software to process packets on this interface. 

Before network protocol DMEs can be used on the LP, 
they must be created. A DME must be created on each LP for 
each bound Protocol. The VR and FA assist in the creation 
of these DMEs. 

Protocols have semi -global data which is required to 
forward packets. This is the data which is not PP specific, but 
protocol specific. Tins data is passed to the VR in the 
protocol registration message. This data is forwarded to the 
LPs and a pointer to this data is passed to the function which 
is called to do the protocol LP initialization. 

Each protocol must provide a function (a forwardingEv- 
entHandlcr) which can handle forwarding events initiated by 
the protocol process. This function must be able to handle 
each of the protocol ForwardingEvcnt types (Protoco- 
lEnablcd, Protocol Disabled and Protocol Updated). The 
ProtocoiEnablcd event triggers the initialization of the pio~ 
tocols LP forwarding data (including the creation of the 
protocols DME). The function is called prior to creating the 
first PP for a particular protocol on each LP. This function, 
which is to be provided by the network protocol, must be 
made available on the LP. As the saying goes, "everything 
that goes up must come down". When a protocol dcrcgistcrs, 
a function is called to disable the initialization done for the 
protocol and remove the DME for the protocol, 
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To enhance the performance of forwarding packets on the 
router platform, ail packet processing required to forward a 
packet on some LAN media is done on the inbound board. 
Because of this, the forwarding software on an LP not only 
requires information about all the PPs on the LP, but also for 5 
all the PPs for which it can transmit out on other LPs. This 
PP information, distributed across multiple LPs for a port on 
one LP is called "Distributed Protocol Port Data". This data 
is required on each LP prior to forwarding the first packet. 
The data is forwarded to the LPs when the LP became active [{J 
and the Media Application registers with the VR. The data 
is sent to the LP for each PP on the VR. 

When the distributed PP data arrives on the LP. the FA 
creates a ProtocolPon object. This object contains all the 
data necessary for the forwarding software to forward a 
packet 15 

The Protocol Port (PP) is a very significant part of this 
system. It represents a logical interface to a network. The 
term PP has many different connotations. There is the PP 
component which resides under the VR. There is also a 
Network Protocol Port component which is specific to a 30 
particular network Protocol type. In addition to these PP 
components there are VR PP objects, Network Protocol Port 
objects and Forwarding Agent Protocol Port Objects. Each 
of the PP objects require a slightly different view of the PP. 
For example, the VR is interested in the protocol indepen- 25 
dent portion of the PP. The protocol processes are interested 
in the protocol dependent portion of the PP, and the for- 
warding DME soft ware is interested in yet a different portion 
of the software (in fact, forwarding software on LPs that 
contain the physical interface associated with a PP require 30 
different information than those on the other LPs), in addi- 
tion to all of this, the PP ^formation is distributed across 
multiple processes, not to mention multiple processors. 

The following protocol port object types exist, including: 
VrProtocotPort. NclworkProtocolPortBasc (also one derived 35 
version for each Protocol type), FalnboundProtocolPort, and 
FaOutboundProtocolPort; 

The VrProtocolPorl provides the data and functionality 
required for the PP by the VR process. This includes alt PP 
dam which is common across all protocols. This data can be «o 
broken down into two categories, inbound and outbound. 
The inboundPpForwardingData is a structure of common 
data required by the inbound forwarding software. The 
outboundPpPorwardingData structure contains data com* 
mon to multiple protocols required by the outbound for- 45 
warding software. These two structures along with methods 
which are used to update the contents of them, make up the 
VrProtocolPort. 

The Network Protocol PortBase class provides protocol 
processes with a base class which is be used to encapsulate 50 
protocol specific forwarding data. This forwarding data, in 
terms of protocol specified objects, ts turned into contiguous 
bytes of data, transmitted to the LPs and reincarnated into 
their original form again. Once back into the object form, 
ihcy can be used by the forwarding software to forward 55 
datagrams. This base class is meant to provide a common 
interface to the VR so that the data can be turned into 
contiguous bytes which arc sent to the FAs. where they arc 
reincarnated back into objects of their original form. 

The FaOutboundProtocolPort class provides the data and #> 
functionality required on LPs which need outbound PP data 
in order to forward the packet This class contains the 
protocol independent outboundPpForwardingData structure 
from the VR as well as the protocol specific outbounclFor- 
wardingData provided by the protocol process. 65 

The FalnboundProiocolPort class is inherited from the 
FaOutboundProtocolPort class. This class provides both the 
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inbound and outbound data required forwarding software. 
This class is used on LPs where inbound packets can be 
processed, thus requiring inbound forwarding data in addi- 
tion to the outbound forwarding data. In addition to the 
outbound data provided by the base class (FaOutboundPro- 
tocolPort), this class contains the protocol independent 
inboundPpForwardingData structure from the VR as well as 
the protocol specific inbound forwarding data provided by 
the protocol process. 

The following section describes the initialization proce- 
dures provided by the VR system on both the CP and LP. 

The Virtual Router requires no pre-provisioning CP ini- 
tialization. All VR initialization is performed during or after 
VR provisioning. The Virtual Router system requires system 
initialization on the LP. The Virtual Router system requires 
a process on the LP which acts as an agent for the VR on the 
LP. This agent process, called the Forwarding Agent (FA), is 
created during LP initialization. This process immediately 
registers itself with the Component Name Server (CNS) so 
that other processes have access to its P1D. 

The following section describes high level details regard- 
ing the processing of messages from CAS. The VR process 
handles CAS messages for itself and all of its subcompo- 
nents. When a provisioning message is received by the VR 
for a subcomponent which requires a process, the VR creates 
the process, and forward the CAS provisioning message to 
that process. In this case, it is the responsibility of the 
subcomponent process to handle the provisioning message 
appropriately and provide the acknowledgment to CAS. 
CAS messages which arc addressed to the VR or to com- 
ponents which do not have processes are processed by the 
VR. 

A Virtual Router Process is created by CAS for each 
provisioned VR. Once the process is created, CAS sends all 
provisioned information for a VR to the VR process. The VR 
creates a process for each provisioned protocol. Once the 
process is created, the VR sends all the provisioning mes- 
sages for the protocol to the protocol processes. 

The VR system primarily consists of two processes, the 
VR process and the FA process. The VR process is created 
by CAS as the appropriate CAS messages are delivered. The 
FA process is created by fixed process initialization on each 
LP. Forwarding packets for a particular protocol over any 
media requires a certain amount of initialization. The ini- 
tialization procedure required can be different depending on 
the type of media a PPis connected to. This section discusses 
the initialization required by each of the various media types 
and the packet forwarding process associated with them. For 
the standard case (i.e., LAN media), the per port initializa- 
tion required prior to packet forwarding includes Virtual 
Router Creation and Provisioning as shown in FIG. 23. The 
following steps must be accomplished. 
Al. CAS Create and Provisioning messages— The VR pro- 
cess is created by CAS and ail VR provisioning messages 
(including all of those for VR subcomponents) arc sent to 
this process. 

A2. Each CAS provisioning message received by the VR for 
protocol subcomponents (including PCF and SNMP) arc 
forwarded to those subcomponents processes. (The stan- 
dard CAS provisioning message is used and forwarded to 
the protocol processes) 

A3. The ProvDone message from CAS indicates that CAS 
has finished sending CAS provisioning message to the VR 
for this CAS session. 

A4. The VR sends a ProvDone message to each of its 
subcomponents processes indicating to them that CAS 
has finished send provisioning messages for this CAS 
session. (The standard CAS provisioning message is used 
and forwarded to the protocol processes) 
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A5. Prior lo giving up control of ihc Execution Engine (EE), 
the VR sends a PEV message to the CNS registering its 
process ID. (The standard CNS registration message type 
is used) 

A6. After the Protocol Processes receive the ProvDonc 5 
message, it can register with the VR. This registration 
indicates the protocols acceptance oflocal packets and the 
process ID which is to receive them. 
In addition, LAN Media Application Creation and Initial- 
ization must be accomplished prior to packet forwarding as 
shown, in FIG, 24. The following steps must be accom- 
plished. 

Bl. CAS Create and Provisioning messages—The Media 
process is created by CAS and all provisioning messages 
arc sent to this process. 

B2, The ProvDone message from CAS indicates that CAS 15 
has finished sending. CAS provisioning message to the 
Media for this CAS session. 

B3. The Media application requests the process ID associ- 
ated with the VR process. A linkage attribute in the Media 
Application defines the V R which is "associated with this 20 
media. (The standard CNS registration message type is 
used) 

B4; Some time later, the process ID associated with the 
request csVR is returned to the Media Application pro- 
cess. This event docs not occur until event AS has # 
occurred. (The standard CNS registration message type is 
used) 

B5. The Media Application registers with the VR. This 
notifies the VR of the Media's availability and process ID. 
Also, Forwarding Data Distribution — LAN Media must be 
accomplislicd as shown in FIG. 25. The following steps must w0 
be accomplished. 

CI. This event depends on event B5 having occurred. The 
Create Protocol Port event sends the generic protocol port 
information associated with one or more protocol ports to 
the relevant set of LPs. If this is the first PP which is *J 
created on this LP, PP information for all registered PPs 
arc also sent to this LP. If this is not the first PP which is 
created on this LP, only the PP information for the 
registered PP is sent to this LP, The relevant set of LPs is 
all LPs which have a physical interface in the VR. 40 
C2. Call the Media ForwardingEventflandicr-^Pass the 
Media Forwarding Data. The Media FEH creates the 
Media DME and any other Media required entities. 
C3. If the LP which receives the create PP message is in the 
inbourtdLpSei, a FalnboundProtocolPort object is created, AS 
otherwise a FaOutboundProtocolPort object created. 
C4. If the LP which receives the create PP message is in the 
inboundLpSet. create a BinrfTablcManagcr and a fast 
BindTabicManager and store pointers to then in the 
FainboundProtocolPori object. 
CS. If the ifEhuyRcgistration field is set in the faCrcatcPro- 50 
tocolPon message, space is allocated in Local Slats Man- 
ager (LSM) for the ifEntry. (LSM provides the message 
for this event) , 
C6. Update the physicaiPortlnfo Structure— Set the pointer 

to the FaPP which is associated with the physical channel. 55 
Also, Protocol Binding — LAN Media must be accomplished 
as shown in FIG. 26. The following steps must be accom- 
plished. 

Dl. This event can only occur after event B5 occurs. B5 is 
the McdiaRegistration event which indicates the media 60 
for the specified PP is available. This event notifies each 
protocol which is provisioned under the specified protocol 
port of the media's availability. 

D2. The. protocol, upon receipt of this mediaAvailabiiity 
message can bind to a PP. This binding determines the 65 
actions which should occur for packets received for the 
specified protocol type. 



D3. The BindProiocolPort event is used to send the bind 
information associated with the individual protocols to the 
appropriate LPs. Included in this bind information is 
Protocol Forwarding Data and Protocol Specific PP For- 
warding Data. Protocol Forwarding Data includes the data 
specific to each protocol which is required by the for- 
warding software to forward packets, this information 
was included in the Protocol Registration (event A6). The 
Protocol Specific PP Forwarding Data includes forward- 
ing data required by each protocols forwarding software 
which is associated with an individual PP. 

D4. if the Protocol has not yet been enabled on this LP, the 
appropriate Protocol ForwardingE vent Handler is called. 

D5. The following events can occur in any order. Update the 
PP forwarding data in the FaPP. Also, Register with the 
Local Cache Manager (LCM) (Message is to be provided 
bytheLCM). 

06. Update the state of the BTM — Update the forwarding 

state for the BTM. 
At this point, packets received by the Frame Source can be 
forwarded The forwarding process works as shown in FIG. 
27 (i.e., Packet Forwarding — LAN Media). 
El. The dispatcher pulls a packet off the inbound packet 

queue and calls the appropriate Media frame source with 

the physical channel number which the packet came from. 
E2. The Frame Source gets a pointer to the Inbound PP 

object via the physical Portlrifo structure maintained by 

the FA. 

E3. The inbound Media DME is called to process the packet. 
FA The protocol Forwarding DME is determined via the 

BTM. The inbound PP object has a pointer to the BTM. 
ES. The protocol forwarding DME is called. The appropriate 

protocol processing is done. 
E6. The protocol forwarding DME does a cache lookup to 

dkacrmine the outbound PP for which the packet is to be 

transmitted out. (Part of the cache entry is a pointer to the 

FaProtocotPon object) 
E7. The outbound Media DME is retrieved from the FaPro- 

tocolPort object. 
ES. The outbound Media DME is called to process the 

packet. 

E9. The appropriate media processing is done and the packet 

is transmitted out the interface. 

The major difference between the standard LAN case and 
the standard WAN case (not including PPP/VCP in the 
standard WAN case) is that the WAN case has its own 
mapping table from inbound packet to inbound PP, In the 
LAN case, the mapping lo a PP is based on the inbound 
physical channel. For the RemoteGroup WAN case, the 
mapping to the PP object is based on data inside the packet 
(e.g. Frame Relay DLCf or Data Unk Connection Indica- 
tor). The WAN component must initialize a table based on 
the mapping data to a ppld. The WAN media has a mapping 
from DLC1 to PP instance ID, but they do not know what the 
PPID is associated with the PP instance. This is required to 
get a pointer to the PP object via the logicalPortlnfo table 
supported by the FA. The WAN media gets the PP instance 
1T> to PPID mapping from the VR during the crcalcProto- 
colPort event. If the crcatcProtocolNotiftcation flag is set, 
the FA sends a notification to the WAN which includes the 
PP instance ID and the PPID. 

Shown in FIG. 28 is the PP initialization for the multi- 
point WAN media (i.e.. Media Application Creation and 
Initialization— Multi-point WAN). The following steps must 
be accomplished. 

Bl. CAS Create and Provisioning messages— The Media 
process is created by CAS and all provisioning messages 
arc sent to this process. 
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B2. The ProvDonc message from CAS indicates that CAS 
has finished sending CAS provisioning message to the 
Media for this CAS session. 

B3. The Media application requests the process ID associ- 
ated with the VR process. A linkage attribute in the Media 5 
Application defines the VR which is associated with this 
media. (The standard CNS registration message type is 
used) 

B4. Some time later, the process ID associated with the 
request csVR is returned to the Media Application pro- to 
cess. This event does not occur until event AS has 
occurred. (The standard CNS registration message type is 
used) 

BS. The Media Application registers with the VR. This 
notifies the VR of the Media's availability and process ID. 1 5 
The creatcProtocolPortNolification field is set to ensure 
the Media Application is notified of the PPID when it is 
created on the LP. 

Also, Forwarding Data Distribution— Mulli -point WAN 

must be accomplished as shown in FIG. 29. The following 20 

steps must be accomplished. 

CI. This event depends on event B5 having occured. The 
Create Protocol Port event sends the generic protocol port 
information associated with one or more protocol pons to 
the relevant set of LPs. If this is the first PP which is 25 
created on this LP, PP information for all registered PPs 
are also sent to this LP. If this is not the first PP which is 
created on this LP. only the PP information for the 
registered PP is sent to this LP. The relevant set of LPs is 
all LPs which have a physical interface in the VR. 30 

CI Call the Media ForwardingEventHandlcr—Pass the 
Media Forwarding Data. The Media FEH creates the 
Media DMB and any other Media required entities. 

C3. If the LP which receives the create PP message is in the 
mboundLpSet, a FalnboundProtocolPort object is created, 35 
otherwise a FaOutboundProtocolPort object created. 

C4. If the LP which receives the create PP message is in the 
mboundLpSet, create a BindTablcManager and a fast 
BindTablcManagcr and store pointers to then in the 
FalnboundProtocolPort object. 40 

C5. If the ifEmryRcgisEration field is set in the faCreatcPro- 
ipcolPort message, space is allocated in LSM for the 
ifEntry. (LSM provides the message for this event.) 

C6. Update the logicalPortlnfo Structure— Set the pointer to 
the FaPP which is associated with the PP identifier 43 
(PP1D). 

C7. Send a CreateProtocolPort notification to the Media 
Application; This notifies the Media of the PPs creation 
and the PPID associated with it. 

Also, Protocol Binding — Multi-point WAN must be accom- so 

plished as shown in FIG. 30. The following steps must be 

accomplished. 

Dl. This event can only occur after event B5 occurs. B5 is 
the MedtaRcgisiration event which indicates the media 
for the specified PP is available; This eventnotifies each 55 
protocol which is provisioned under the specified protocol 
port of the media's availability. 

D2. The protocol, upon receipt of this mediaAvailability 
message can bind to a PP. This binding determines the 
actions which should occur for packets received for the 60 
specified protocol type. 

D3. The BindProtocolPort event is used to send the bind 
information associated with the individual protocols to the 
appropriate LPs. Included in this bind information is 
Protocol Forwarding Data and Protocol Specific PP For- 65 
warding Data. Protocol Forwarding Data includes the data 
specific to each protocol which is required by the for- 



warding software to forward packets, this information 
was included in the Protocol Registration (event A6). 
Also, the Protocol Specific PP Forwarding Data includes 
forwarding data required by each protocols forwarding 
software which is associated with an individual PP. 

D4. If the Protocol has not yet been enabled on this LP, the 
appropriate Protocol ForwardingEvcniHandler is called. 

D5. The following events can occur in any order. Update the 
PP forwarding data in the FaPP. Also, Register with the 
LCM (Message is to be provided by the LCM). 

D6. Update the state of the BTM— Update the forwarding 
state for the BTM. 

At litis point, packets received by the Frame Source can be 

forwaided. The forwarding process works as shown in FIG. 

31 (i.e., Packet Forwarding— .Multi-point WAN). 

El. The dispatcher pulls a packet off the inbound packet 
queue and calls the appropriate Media frame source with 
the physical channel number which the packet came from. 

E2. The Frame Source gets a pointer to the Inbound PP 
object via its own mapping from DLCI to PPID and then 
from PPID to PP object pointer via the logicalPortfnfo 
structure maintained by the FA. 

E3. The inbound Media DME is called to process the packet. 

E4. The protocol Forwarding DME is determined via the 
BTM. The inbound PP object has a pointer to the BTM. 

ES. The protocol forwarding DME is called. The appropriate 
protocol processing is done. 

E£. The protocol forwarding DME docs a cache lookup to 
determine the outbound PP for which the packet is to be 
transmitted out. (Part of the cache entry is a pointer to the 
FaProtocolPort object) 

E7. The outbound Media DME is retrieved from the FaPro- 
tocolPort object. 

E& The outbound Media DME is called to process the 
packet. 

E9, The appropriate media processing is done and the packet 

is UTUisrmited out the interface. 

Shown in FIG. 32 is the PP initialirAtion for the Point to 
Point Protocol (PPP) WAN Media (i.e.. Media Application 
Creation and Initialization— PPP WAN). The following 
steps must be accomplished. 

Bl. CAS Create and Provisioning messages— The Media 
process is created by CAS and all provisioning messages 
are sent to this process. 

B2. The ProvDonc message from CAS indicates that CAS 
has finished sending CAS provisioning message to the 
Media for this CAS session. 

B3. The Media application requests the process ID associ- 
ated with the VR process. A linkage attribute in the Media 
Application defines the VR which is associated with this 
media; (The standard CNS registration message type is 
used) 

B4. Some time later, the process ID associated with the 
request csVR is returned to the Media Application pro- 
cess. This event does not occur until event A5 has 
occurred. (The standard CNS registration message type is 
used) 

BS. The Media Application registers with the VR. This 
notifies the VR of the Media's availability and process ID. 
The bindProtocoIPortNotification field is set to ensure the 
Media Application is notified when the PP is bound to. 
This value is stored in the VR PP. 

Also, Forwarding Data Distribution — PPP WAN must be 

accomplished as shown in FIG. 33. The following steps must 

be accomplished. 
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CI. This event depends on event B5 having occured. The 
Create Protocol Port event sends the generic protocol pott 
information associated with one or more protocol pons to 
the relevant set of LPs. If this is the first PP which is 
created on this LP, PP information for all registered PPs 5 
are aJso sent to this LP. If this is not the first PP which is 
created on this LP, only the PP information for the 
registered PP is scm to this LP. The relevant set of LPs is 
all LPs which have a physical interface in the VR. 
G2. Call the Media ForwardingEvcntHandlcr — Pass the to 
Media Forwarding Data. The Media FEH creates the 
Media DME and any other Media required entities. 
C3. If the LP which receives the create PP message is in the 
inboundLpSei, a FainboundProtocolPort object is created, 
otherwise a FaOutboundProtocolPort object created is 
C4. If the LP which receives the create PP message is in the 
inboundLpSct, create a BindTabtcManagcr and a fast 
BinaTabtc Manager and store pointers to then in the 
FalnboundProiocolPon object. 
C5. If the ifEntryRegistrau'on field is set in the faCrcatcPro- 20 
tocolport message, space is allocated in LSM for the 
ifEntry. (LSM provides the message for this event.) 
C6. Update the physicalPorUnfo Structure— Set the pointer 
toihe FaPP which is associated with the physical channel. 
Also, Protocol Binding— PPP WAN must be accomplished 25 
as shown in FIG. 34. The following steps must be accom- 
plished. 

Dl. this event can only occur after event BS occuis. B5 is 
the MediaRcgistraiion event which indicates the media 
for the specified PP is available. This event notifies each 30 
protocol which is provisioned under the specified protocol 
port of the media's availability. 

D2. The -protocol, upon receipt of this mcdiaAvailability 
message can bind to a PP. This binding determines the 
actions which should occur for packers received for the 35 
specified protocol type. 

D3. The BindProiocolPort event is used to send the bind 
information associated with the individual protocols w the 
appropriate LPs. Included in this bind information is 
Protocol Forwarding Data and Protocol Specific PP For- <o 
warding Data. The mcdiaApplicationBindNoufication 
field is set in this message. The Protocol Forwarding Data 
includes the data specific to each protocol which is 
required by the forwarding software to forward packets, 
this information was included in the Protocol Registration 45 
(event A6). The Protocol Specific PP Forwarding Data 
includes forwarding data required by each protocol's 
forwarding software which is associated with an indi- 
vidual PP, 

D4. If the Protocol has not yet been enabled on this LP, the 50 
appropriate Protocol ForwardingEvcntHandlcr is called. 

D5. lite following events can occur in any order. Update the 
PP forwarding data in the FaPP. Also, register with the 
LCM (Message is to be provided by the LCM). 

D6. Update the state of the BTM— Update the forwarding 55 
state for the BTM. 

D7. A bind notification is sent to the media Application. 

At this poim, packets received by the Frame Source can be 

forwarded. The forwarding process works as shown in FIG. 

35 (Le., Packet Forwarding— PPP WAN). 60 

El. The dispatcher pulls a packet off the inbound packet 
queue and calls the appropriate Media frame source with 
the physical channel number which the packet came from. 

E2. The Frame Source gets a pointer to the Inbound PP 
object via its own mapping from DLCI to PPID and then 65 
from PPID to PP object pointer via the logical Ponlnfo 
structure maintained by the FA. 
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E3. The inbound Media DME is called to process the packet. 

E4. The protocol Fonvarding DME is determined via the 
BTM. The inbound PP object has a pointer to the BTM. 

E5. The protocol forwarding DME is called The appropriate 
protocol processing is done. 

E6. The protocol forwarding DME does a cache lookup to 
dctcrrninc the outbound PP for which the packet is to be 
transmitted out. (Pan of die cactte entry is a pointer to the 
FaProtocolPon object) 

E7. The outbound Media DME is retrieved from the FaPro- 
tocolPon object. 

E8. The outbound Media DME is called to process the 
packet. 

E9. The appropriate media processing is done and the packet 

is transmitted out the interface. 

The Virtual Link is a medium which supports Inter- Virtual 
Router connectivity. That is the ability to interconnect two 
Virtual Routers. Although it is possible to do this using a real 
LAN connection and two physical ports, this mechanism 
provides the same functionality without the involvement and 
expense of hardware. 

This section describes the VR requirements to support 
Inter-Virtual Router (1 VR) links. Multiple solutions were 
conceived regarding methods of logically connecting VRs. 
The solution chosen was to use a point to point model called 
a "VirtuaiLink". 

Forwarding a packet from one VR through another VR 
and out a physical interface requires forwarding data (local 
cache and protocol port information) for both VRs, the 
inbound VR and the outbound VR. Two alternatives were 
discussed regarding the location of forwarding data on the 
VRs, One solution was to put forwarding data on all LPs 
which could potentially send a packet out a VR. Given this 
alternative, each LP had to have routing data for VRs which 
had physical interfaces on its LP as well as VRs which it was 
connected to via IVR links. This solution was not deemed 
usable because of the amount of memory it required. 

The second solution was to provide only the routing data 
for VRs supported by this LPs physical interfaces. This 
would eliminate the need to have routing data for all VRs 
which could be reached via IVR links. The major disadvan- 
tage with this solution is that total packet processing could 
not be achieved on one LP for IVR packets. If the inbound 
LP did not have physical interfaces for the outbound VR, it 
would not have routing data for the outbound VR, thus the 
packet would have to be sent to an LP which had the data 
This requires an additional amount of effort to forward a 
packet, however the impact of performance for IVR packets 
doesn't seem to be a major concern. 

Virtual Link Data identifies the remote PP and VR asso- 
ciated with a IVR PP. This data exists in the Virtual Link 
component. Because the Virtual Link component is under 
casRoot (thus the VR docs not get the data for it), it must 
send this data to both VRs involved and is stored in the 
appropriate PP objects. This requires a VirtuaiLinkMedia 
process to accept the CAS provisioned data and forward it 
to the VRs. 

The second part of the Virtual Link data is data which 
identifies which LPs have forwarding data for each VR/pro- 
tocol pair. This data is stored in on each VR in an object 
called VtrtualLinkDau. The Virtual Link Data consists of a 
two dimensional array indexed by LP number and VR 
number. The data is learned by the VR, and forwarded to all 
LPs. When this data is received on the LPs. the FA deter- 
mines the LP to be used for packet processing for each IVR 
PP on the LP. To determine the LP to be used a forward 
search of the array starting with the current LP is done until 
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an LP is found that supports the destination VR. Using this 
method, the current LP always is used if possible. (The 
virwalLink data is forwarded to LPs if one or more PPs arc 
registered with Virtual Link Media) 

The Virtual Link Media Application is used to support 5 
inter- VR links. The Virtual Link Media initialization process 
is identical to the process used by the LAN media. However 
there arc some difference in the packet forwarding process. 
The packet forwarding process for Virtual Link (VL) media 
is shown in FIGS. 36 and 37. The following steps must be to 
accomplished. 

El. The dispatcher pulls a packet off the inbound packet 
queue and calls trie appropriate Media frame source with 
the physical channel number which the packet came from 
(this is the standard physical PP. not the IVR PP). 15 

EX. The Frame Source gels a pointer to the Inbound PP 
object via the physicalPortlnfo structure maintained by 
the FA. 

E3. The inbound Media DME is called to process the packet. 
E4. The protocol Forwarding DME is determined via the 20 

BTM. The inbound PP object has a pointer to the BTM. 
E5. The protocol forwarding DME is called. The appropriate 

protocol processing is done. 
E6\ The protocol forwarding DME docs a cache lookup to 

determine the outbound PP for which the packet is to be 23 

transmitted out. (Part of the cache entry is a pointer to the 

FaProtocolPort object) 
E7. The outbound Media DME is retrieved from the PaPro- 

tocolPort object 
E8. The outbound Media DME is called to process the 30 

packet This is the outbound media application DME for 

the IVR PR 

The IVR media outbound DME determines the far end 
VR. this information is part of the PP forwarding data. 

The packet context is changed, specifically the VR num- 3s 
ber is changed to the destination VR and the inbound PP 
number is changed to the IVR PP number. 

The IVR media outbound DME determines which LP has 
routing information for this protocol and this VR. (This 
information is provided by the VR in the VirmalUnkData AO 
table. A forward search is done of the table by VR and LP 
number. The first LP found which supports this VR and 
protocol is used) 

E9. The packet is sent to the LP identified in the previous 

step (if the current LP supports the destination VR, then 45 

this step is slopped) 
E10. If the packet was forwarded to another LP, the packet 

is received by the dispatcher, and the Frame Source is 

called. 

Ell. The Frame source determines that this is an IVR packet 50 
and gets a pointer to the inbound PP associated with the 
inbound PPID. 

E12. The inbound Media Application DME is called (this is 
the IVR media inbound DME). 

ED. The protocol type is determined, and the protocol DME 55 
is retrieved from the BTM. 

E14. the protocol DME is called to forward the packet 

E15; The protocol DME docs the appropriate packet pro- 
cessing including a cache lookup on the dcstinaiion 
address in the packet. A successful cache lookup provides 60 
a pointer to the outbound PP for which the packet is to be 
transmitted 

E16. The outbound Media DME is retrieved from the PP 
object. 

E17. The protocol DME fragments the packet if necessary 65 
and transmits it out the outbound PP by calling the 
outbound media DME as identified in the PP structure. 



E18. The Media Application outbound DME adds the appro- 
priate media header and sends the packet out the interface. 
The Virtual Link simulates the transmission of a packet 
out an interface of one VR and the reception of the packet 
on an interface on the destination VR. A packet which is 
received on an interface is sent to tlie appropriate forwarder 
based on the packet type and the bind information associated 
with the inbound PP. The forwarder, based on routing 
information, determines the outbound PP is a IVR PP. The 
packet is transmitted out the PP (via the outbound media 
DME). It is the responsibility of the IVR PP Media DME to 
get the packet to 2 LP which has routing data for the 
destination VR. This information if provided by the FA in 
the VirtualLinkData object. If the current LP has the appro- 
priate routing data, the packet is given back to the forward- 
ing software with an updated frame descriptor which 
includes a new VR ID and new inbound PPID. The for- 
warding software can then restart the packet forwarding 
process using the routing data of the outbound VR. Shown 
to FIG. 38 is an example where the outbound physical port 
is on the same LP as the inbound physical port. 

If the LP which to packet was received on docs not have 
the routing data for the outbound VR, the packet must be 
transmitted to an LP which does. Again the outbound IVR 
PP is responsible for getting the packet to an LP which 
supports the outbound VR. If the current LP does not support 
the outbound VR, the PP sends the packet to a LP which 
docs. Once the packet is received on the LP which has 
appropriate routing data, the packet forwarding process is 
restarted using the new VR ID and incoming PP ID. See an 
example in FIG. 39. In this example, the outbound PP is an 
IVR PP which is connected to VR/1. LP1 docs not; have 
routing data for VR/1, so the packet must be sent to a LP 
which does have the routing data, in this case LP2. If the 
destination LP is not the same as the current LP, the packet 
could possible traverse three LPs before exiting the plat- 
form. This happens if the inbound LP does not support the 
outbound VR and the packet is sent to another LP for 
forwarding. On the second LP, the forwarding is done using 
the destination VR LCM. The outbound PP may be on 
another LP, which would be the third LP, Sec this example 
involving three LPs in FIG. 40. 

A QusterBridge (CB) port can act as a gateway for all 
bridged ports in the VR to routing and visa versa. The 
objective is to allow protocol packets to be freely bridged 
between LAN interfaces, with the freedom of packets des- 
tined for the Media Access Control (MAC) Address of the 
Cluster bridge to be routed outside of the bridge set The 
ClustcrBridge port ts similar to the IVR PP in-that it is a 
distributed PP. The inbound PP data for CB PP must exist on 
all LPs supporting the VR. This is required on all LPs with 
bridging so that packets can be bridged to it and routed out 
of iL It is required on all LPs with routing so that packets can 
be routed to h and bridge out of it 

The VR process provides a mechanism which sends 
inbound and outbound data (FalnboundProtocoIPort) to all 
LPs for distributed PPs. The FA provides this data to the 
forwarding software upon request 

In order for this to operate successfully with bridge ports, 
the Cluster Bridge port Bind. Incoming and Outgoing port 
information is required on every LP which has a bridged port 
on it per VR. 

Cluster Bridge Media is used to support Cluster Bridging. 
The initialization required prior to packet forwarding is 
identical to that of the LAN case. (The only special case 
involved here is that the CB PP is a distributed PP. That is 
it must exist on all the LPs which contain bridged ports of 
the same domain. To simplify the PP forwarding data 
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distribution software, this data is placed on all LPs in the 
VR.) 

However, the process used lo forward packci is changed 
somewhat. This process is identified in FIG. 41 as Packet 
Forwarding— Ouster Bridge Media. In this example, a 5 
packet which is received on a routed port is to be transmitted 
out a bridged port. The following steps must be accom- 
plished. 

El. The dispatcher pulls a packet off the inbound packet 
queue and calls the appropriate Media frame source with J0 
the physical channel number which the packet came from. 

E2, The Frame Source gets a pointer to the Inbound PP 
object via the physical Portinfo structure maintained by 
the FA. , 5 

£3. The inbound Media DM E is called to process the packet 

E4. The protocol Forwarding DME is determined via the 
BTM. The inbound PP object has a pointer to the BTM. 

E5. The protocol forwarding DME is called. The appropriate 
protocol processing is done, (This is the standard bridging 20 
DME) The protocol forwarding DME docs a cache 
lookup to determine the outbound PP for which the packet 
is to be transmitted out. (There is a static entry in the 
bridging cache which points to the CB protocol port. At 
this point, a flag is set in the framcDcscriptor which 25 
identifies this packet as being originated from bridging) 

E6. (Pan of the cache entry is a pointer to the FaProtocolPort 
object) 

E7. The outbound Media DME is retrieved from the FaPro- 
tocolPort objccL 30 

E8. The outbound Media DME is called to process the 
packct(This is the CJustcrBridge outbound DME). 

E9. The CB outbound DME determines if the packet origi- 
nated from bridging or routing. If it originated from 
bridging, the protocol type is decoded and the protocol 35 
DME is determined via the Bind Tabic 

E10. The protocol DME is called 

EU. the protocol DME does the appropriate packci pro- 
cessing including a cache lookup on the destination 
address in the packet. A successful cache lookup provides 40 
a pointer to the outbound PP for which the packet is to be 
transmitted. 

E12. The protocol DME fragments the packet if necessary 
and transmits it out the PP by calling the outbound DME 
as identified in the PP structure. 45 
E13. The Media Application outbound DME adds the appro- 
priate media header and sends the packet out the interface. 
E14. The appropriate media processing is done and the 
packet is transmitted out the interface. 
Beyond initialisation and provisioning as described 50 
above, it is also desirable to have interface statistics easily 
retrievable. This can be accomplished in one of several 
manners known to those of ordinary skill in the art. For 
example, SNMP may be used as the framework to set up and 
retrieve this information in a timely fashion. 53 

It will be appreciated by those skilled in the art that the 
VR system processes including the Virtual Router Process, 
the Forwarding Agent Process, and the Network Protocol 
Base Process may each have several components which 
have specific events that must be acted upon. However in 60 
view of the preceding discussion concerning the packet 
processing and forwarding process which includes virtual 
routers and virtual links, the software code necessary to 
accommodate these events in accordance with the present 
invention should be well within the understanding of a 65 
person of ordinary, skill in the art. As such no further 
discussion needs to be provided concerning these events. 



Although the invention has been described and illustrated 
with a certain degree of particularity, it is understood that the 
present disclosure of embodiments has been made by way of 
example only and that numerous changes in the arrangement 
and combination of parts as well as steps may be resorted to 
by those skilled in the art without departing from the spirit 
and scope of the invention as claimed. 

What is claimed is: 

1. A physical switching device for use in a communication 
network to switch Open Systems Interconnection (OSI) 
network layer protocol data units within the communication 
network, the physical switching device comprising: 

(a) at least a first and a second virtual switch, each virtual 
switch comprising decision means for determining an 
associated directive based on a destination identifier 
within a particular protocol data unit received at a data 
port, each virtual switch further comprising processing 
means for inserting the particular protocol data unit into 
an outgoing data stream on another data port according 
to the associated directive to enable delivery of the 
protocol data unit to the destination identifier, both data 
ports being associated with a set of data interfaces 
selected from a plurality of data interfaces in a physical 
communication network switch, tlic set of data inter- 
faces being assigned exclusively 10 a unique virtual 
switch; 

(b) management means, opcratively coupled to each vir- 
tual switch, for maintaining information on an associa- 
tion between the plurality of data interfaces and each 
virtual switch, the management means comprising con- 
trol means dependent on the association information for 
limiting the processing means of each virtual switch 10 
only inserting the particular protocol data unit into an 
outgoing data stream on another data port associated 
with the same virtual switch which received the par- 
ticular protocol data unit. 

2. The physical switching device of claim 1 wherein each 
data port is selected from the group consisting of protocol 
data units arriving on a data interface having unique 
attributes, a data interface on the physical switch, a time slot 
out of several lime slots in a time -divided frame received at 
a data interface on the physical switch, and 0 code divided 
cell out of several code divided cells received at at least one 
data interface on the physical switch. 

3. The physical switching device of claim 1 wherein the 
set of data interfaces associated with a virtual switch 
includes a first data interface including means for manipu- 
lating a protocol data unit ha Wng a different protocol type 
from a second data interface such that protocol data units of 
different protocol types can be switched within a single 
virtual switch, the different protocol data unit protocol types 
being selected from the group consisting of different Open 
Systems Interconnection (OSI) physical layer media types, 
different OSI link layer signaling protocols, and different 
OSI network layer protocols, 

4. The physical switching device of claim 1 wherein the 
management means further comprises means for maintain- 
ing a database of known destination identifiers and means 
for requiring verification that the destination identifier in the 
particular protocol data unit is in the database prior to 
inserting the particular protocol data unit into an outgoing 
data stream on another data port such that delivery of the 
protocol data unit to an unknown destination identifier is 
prevented. 

5. The physical switching device of claim 1 wherein each 
virtual switch processing means comprises means for 
restructuring the particular protocol data unit by deleting. 
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inserting, and replacing biis in the particular protocol data 
unit in accordance with the associated directive prior to 
inserting the particular protocol data unit into the outgoing 
data stream. 

6. The physical switching device of claim 1 wherein each 5 
virtual switch processing means comprises means for moni- 
toring the particular protocol data unit by dropping, sending, 
sending a copy of, and auditing the contents of the particular 
protocol data unit in accordance with the associated direc- 
tive prior to inserting the particular protocol data unit into l0 
the outgoing data stream. 

7. The physical switching device of claim 1 wherein: 

(a) the physical switching device further comprises means 
for performing operations selected from the group 
consisting of bridge, route, switch, in-line filter, proto- J 5 
col conversion, and a security function; 

(b) the protocol data unit is selected from the group 
consisting of a frame, a cell, and a packet; 

(c) the communication network is selected from the group 
consisting of local area network, wide area network. 20 
metropolitan area network, and wireless network; and 

(d) the communication network switches protocol data 
units having a content selected from the group consist- 
ing of voice, video, and data. 

8. A physical switching device for use in a communication 
network to switch Open Systems Interconnection (OSI) 
network layer protocol data units within the communication 
network on a shared communication medium, the physical 
switching device comprising: 

(a) at least a first and a second virtual switch, each virtual 
swiich comprising decision means for determining an 
associated directive based on a destination identifier 
within a particular protocol data unit received at a data 
port, each virtual swiich further comprising processing 35 
means for inserting the particular protocol data unit into 
an outgoing data stream on another data port according 

to the associated directive to enable delivery of the 
protocol data unit to the destination identifier, bom data 
pons being associated with a set of data interfaces < 0 
selected from a plurality of data interfaces in a physical 
communication network switch, the set of data inter- 
faces being assigned exclusively to a unique virtual 
switch; 

(b) virtual link management means, operaiively coupled 45 
to at least the first and the second virtual switches, for 
maintaining information on at least one virtual link 
between at least the first and the second virtual switch, 
each virtual link comprising a first end and a second 
end of. a data path on the shared communication so 
medium, each virtual link end comprising a data port 
from the plurality of data interfaces in the physical 
communication network swiich. 

9. The physical switching device of claim 8 wherein the 
first and the second virtual link end of the at least one virtual ss 
link are in a different set of data ports assigned exclusively 

to the first and the second virtual switch, respectively, such 
that the virtual link provides a data path between the first and 
the second virtual swiich on the shared communication 
medium. 

10. The physical switching device of claim 9 wherein the 
first and the second virtual switches arc located in a single 
geographic location and the shared communication medium 
comprises a rncmory shared between the first and the second 
virtual switches. 

U. The physical switching device of claim 8 wherein the 
first and the second virtual switches are geographically 
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remote from one another and wherein the first and the 
second virtual link ends are in a single set of data ports 
assigned exclusively to the first and the second virtual 
switch such that the virtual link provides a data path between 
the first and the second virtual switches on the shared 
communication medium across a geographic distance. 

12. The physical switching device of claim 11 wherein the 
shared communication medium comprises a high data trans- 
fer rate link between the first and the second virtual switches 
which spans the geographic distance. 

13. The physical switching device of claim 8 further 
comprising at least one filter operaiively coupled to the data 
path which filters protocol data units communicated in the 
virtual link data path according to one access policy out of 
a plurality of access policies that arc separately specified for 
each virtual switch. 

14. The physical switching device of claim 13 wherein the 
at least one filter comprises a first and a second filter 
opcratively coupled to the first and the second virtual switch, 
respectively, which filters protocol data units communicated 
in the virtual link data path according to an access policy 
specified for the first and the second virtual switch, respec- 
tively. 

15. The physical switching device of claim 8 wherein 
each data port is selected from the group consisting of 
protocol data units arriving on a data interface having unique 
attributes, a data interface on the physical switch, a time slot 
out of several time slots in a time-divided framereccived at 
a data interface on the physical switch, and a code divided 
cell out of several code divided cells received on at least one 
data interface on the physical switch. 

16. The physical switching device of claim 8 wherein the 
set of data interfaces associated with a virtual switch 
includes a first data interface including means for manipu- 
lating a protocol data unit having a different protocol type 
from a second data interface such that protocol data units of 
different protocol types can be switched within a single 
virtual switch, the different protocol data unit protocol types 
being selected from the group consisting of different Open 
Systems Interconnection (OS!) physical layer media types, 
different OSI link layer signaling protocols, and different 
OSI network layer protocols. 

17. The physical switching device of claim 8 wherein 
each virtual switch processing means comprises means for 
restructuring the particular protocol data unit by deleting; 
inserting, and replacing bits in the particular protocol data 
unit in accordance with the associated directive prior to 
inserting the particular protocol data unit into the outgoing 
data stream. 

18. The physical switching device of claim 8 wherein 
each virtual switch processing means comprises means for 
monitoring the particular protocol data unit by dropping, 
sending, sending a copy of, and auditing the contents of the 
particular protocol data unit in accordance with the associ- 
ated directive prior to inserting the particular protocol data 
unit into the outgoing data stream. 

19. The physical switching device of claim 8 wherein: 

(a) the physical switching device further comprises means 
for performing operations selected from the group 
consisting of bridge, route, s witch, in-line filter, proto- 
col conversion, and a security function; 

(b) the protocol data unit is selected from the group 
consisting of a frame, a cell, and a packet; 

(c) the communication network is selected from the group 
consisting of local area network, wide area network, 
metropolitan area network, and wireless network; and 

(d) the communication network switches protocol data 
units having a content selected from the group consist- 
ing of voice, video, and data. 
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20. A communicaiion system which delivers Open Sys- 
tems Interconnection (OSI) network layer protocol data 
units within a first and a second virtual dosed user group on 
a shared communication medium, the communication sys- 
tem comprising: 

(a) first virtual , closed user group processing means for 
examining and modifying data bits within a protocol 
data unit received from a member of the first virtual 
closed user group on the shared communication 
medium, each member of the first virtual closed user 
group having a unique destination identifier, the first 
virtual closed user group processing means comprising 
delivery means for delivering the modified protocol 
data unit to another member of the first virtual closed 
user group; 

(b) second virtual closed user group processing means for 
examining and modifying data bits within a protocol 
data unit received from a member of the second virtual 
closed user group on the shared communication 
medium, each member of (he second virtual dosed user 
group having a unique destination identifier, the second 
virtual closed user group processing means comprising 
delivery means for delivering the modified protocol 
data unit to another member of the second virtual 
closed user group; and 

(c) a framcr means, opcrativcly coupled to the first and the 
second virtual dosed user group processing means, for 
maintaining a database of all destination identifiers 
representing users in that user group currently reach- 
able for delivery of protocol data units within the 
communication system, the framcr means comprising 
means for requiring verification that each destination 
identifier in a protocol data unit indicates a user in that 
user group can be currently reached for delivery 
through a lookup in the database prior to completing 
ddivcry of the protocol data unit to the user indicated 
by the associated destination identifier, the framer 
means further comprising means for limiting access to 
the database such thai each virtual dosed user group 
only has access to specific destination identifiers owned 
by that particular virtual dosed user group so that a 
protocol data unit having a destination identifier which 
is not owned by the particular virtual closed user group 
will not be delivered. 

21. The communication system of claim 20 wherein each 
virtual dosed user group processing means comprises means 
for modifying data bits within a received protocol data unit 
by deleting, inserting, and rcpladng bits in the received 
protocol data unit prior to delivering the modified protocol 
data unit to another member of the same virtual dosed user 
group. 

22. The communication system of claim 20 wherrin each 
virtual closed user group processing means further com- 
prises means for monitoring the received protocol data unit 
by dropping, sending, sending a copy of, and auditing the 
contents of the received protocol data unit prior to delivering 
the modified protocol data unit to another member of the 
same virtual dosed user group. 

23. The communicaiion system of daim 20 wherein each 
virtual dosed user group processing means delivers the 
modified protocol data unit to another member of the same 
virtual closed user group without modifying predetermined 
Open Systems Interconnection (OSI) physical layer, link 
layer, and network layer access protocols used to commu- 
nicate protocol data units over the shared communication 
medium 

24. The communication system of claim 23 wherdn each 
virtual closed user group processing means ddivers the 
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modified protocol data unit to another member of the same 
virtual closed user group without modifying ihe predeter- 
mined access protocols such that any particular device 
capable of communicating on the shared communication 
5 medium can be a member of cither virtual closed user group 
by having the framer means limit database access to desti- 
nation identifiers associated with the particular device to a 
particular desired virtual closed user group. 

25. The communication system of claim 20 wherein the 
j 0 Framcr means further comprises means for assigning incom- 
ing protocol data unit traffic to each virtual dosed user group 
based on an access policy that is separately sped Bed in each 
virtual dosed user group. 

26. The communication system of claim 20 wherein the 
first and the second virtual closed user group processing 

15 means indudc a first and a second virtual switch, respec- 
tively, each virtual switch comprising decision means for 
determining an associated directive based on a destination 
identifier within a particular protocoldata unit recdved at a 
data port, each virtual switch further comprising a processor, 

20 whidi performs the functions of the virtual closed user 
group delivery means by inserting the particular protocol 
data unit into an outgoing data stream on another data port 
according to the associated directive to enable delivery of 
the protocol data unit to the destination identifier within the 

25 protocol data unit. 

27. The communication system of claim 26 wherein the 
first and the second virtual switch are located within a single 
physical switching device, both data pons for each virtual 
switch being assodatcd with a set of data interfaces in the 

30 physical switching device assigned exclusively to the same 
virtual switch. 

28. The communication system of claim 26 wherein the 
first and the second virtual switch are located within differ- 
ent physical switching devices, both data ports for each 

35 virtual switch being associated with a set of data interfaces 
in the respective physical switching devices which are 
assigned exclusively to the same virtual switch. 

29. The communication system of claim 28 wherein the 
different physical switching devices arc geographically 

40 remote from one another. 

30. The communication system of claim 26 wherein each 
data port is selected from the group consisting of protocol 
data units arriving on a data interface having unique 
attributes, a data interface on a physical switching device, a 

45 lime slot out of several time slots in a timc-divided frame 
recdved at a data interface on a physical switching device, 
and a code divided cell out of several code divided ceils 
received on at least one data interface on a physical switch- 
ing device. 

50 31. The communication system of clai m 26 wherein the 
set of data interfaces associated with a virtual switch from a 
physical switching device includes a first data interface 
includingmcans for manipulating a protocol data unit hav* 
mg a different protocol type from a second data interface 

55 such that protocol data units of di Oercnt protocol types can 
be switched within a single virtual switch, the different 
protocol data unit protocol types being selected from the 
group consisting of different Open Systems Interconnection 
(OSI) physical layer media types, different OSI link layer 

60 signaling protocols, and different OSI network layer proto- 
cols. 

31 The communication system of claim 26 wherein each 
virtual switch processor comprises means for resuueturihg 
the particular protocol data unit by deleting, inserting, and 
65 repladng bits in the particular protocol data unit in accor- 
dance with the associated directive prior to inserting the 
particular protocol data unit into the outgoing data stream. 
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33. The communication system of claim 26 wherein each 
virtual switch processor comprises means for monitoring the 
particular protocol data unit by dropping, sending, sending 
a copy of, and auditing the contents of the particular protocol 
data unit in accordance with the associated directive prior to 5 
inserting the particular protocol data unit into the outgoing 
data stream. 

34. The communication system of claim 26 wherein: 

(a) the protocol data unit is selected from the group 
consisting of a frame, a cell, and a packet; , 0 

(b) the communication network is selected from the group 
consisting of local area net work, wide area network, 
metropolitan area network, and wireless network; and 

(c) the communication network switches protocol data 
units having a content selected from the group consist- is 
ing of voice, video, and data. 

35. The communication system of claim 26 further com- 
prising a virtual link between the first and the second virtual 
switch, the virtual link comprising a first end and a second 
end of a data path on the shared communication medium, 20 
each end comprising a data port in a different virtual dosed 
user group. 

36\ The communication system of claim 35 further com- 
prising a filter operatively coupled to the data path which 
niters protocol data units communicated in the data path. 25 

37. The communication system of claim 20 wherein the 
fust virtual closed user group processing means include a 
first and a second virtual switch, respectively, each virtual 
switch comprising decision means for determining an asso- 
ciated directive based on a destination identifier within a 50 
particular protocol data unit received at a data port, each 
virtual switch further comprising a processor, which per- 
forms the functions of the virtual closed user group delivery 
means by inserting the particular protocol data unit into an 
outgoing data stream on another data port according to the 33 
associated directive to enable delivery of the protocol data 
unit to the destination identifier within the protocol data unit. 

38. The communication system of claim 37 wherein the 
first and the second virtual switch arc located within a single 
physical switching device, both data ports for each virtual <o 
switch being associated with a set of data interfaces in the 
physical switching device assigned exclusively to the same 
virtual switch. 

39. The communication system of claim 37 wherein the 
first and the second virtual switch are located within differ- 45 
cnt physical switching devices, both data ports for each 
virtual switch being associated with a set of data interfaces 

in the respective physical switching devices which arc 
assigned exclusively to the same virtual switch. 

40V The communication system of claim 37 wherein the so 
different physical switching devices are geographically 
remote from one another. 

41. The communication system of claim 37 wherein each 
data port is selected from the group consisting of protocol 
data units arriving on a data interface having unique 55 
attributes, a data interface on a physical switching device, a 
time slot out of several time slots in a time-divided frame 
received at a data interface on a physical switching device, 
and a code divided cell out of several code divided cells 
received on at least one data interface oo a physical switch- « 
ing device. 

42. : The communication system of claim 37 wherein the 
set of data interfaces associated with a virtual switch from a 
physical switching device includes a first data interface 
including means for manipulating a protocol data unit taav- 65 
ing a different protocol type from a second data interface 
such that protocol data units of different protocol types can 
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be switched within a single virtual switch, the different 
protocol data unit protocol types being selected from the 
group consisting of different Open Systems Interconnection 
(OS!) physical layer media types, different OS! link layer 
signaling protocols, and different OSI network layer proto- 
cols. 

43. The communication system of claim 37 wherein each 
virtual switch processor comprises means for restructuring 
the particular protocol data unit by deleting, inserting, and 
replacing bits in the particular protocol data unit in accor- 
dance with the associated directive prior to. inserting the 
particular protocol data unit into the outgoing data stream. 

44. The communication system of claim 37 wherein each 
virtual switch processor comprises means for monitoring the 
particular protocol data unit by dropping, sending, sending 
a copy of, and auditing the contents of the particular protocol 
data unit in accordance with the associated directive prior to 
inserting the particular protocol data unit into the outgoing 
data stream. 

45. The communication system of claim 37 wherein: 

(a) the protocol data unit is selected from the group 
consisting of a frame, a cell, and a packet; 

(b) the communicauon network is selected from the group 
consisting of local area network, wide area network, 
metropolitan area network, and wireless network; and 

(c) the communication network switches protocol data 
units having a content selected from the group consist- 
ing of voice, video, and data. 

46. The communication system of claim 37 further com- 
prising a virtual link between the first and the second virtual 
switch, the virtual link comprising a first end and a second , 
end of a data path on the shared communication medium, 
each end comprising a ;data port in the same virtual closed 
user group. 

47. The communication system of claim 46 further com- 
prising a filter operatively coupled to the data path which 
filters protocol data units communicated in the data path. 

48. A method for delivering Open Systems Interconncc- 
Uon (OSI) network layer protocol data units within a first 
and a second virtual closed user group on a shared commu- 
nication medium in a communication system, the method 
comprising the device-implemented steps of: 

(a) cxanrining and modifying data bits within a protocol 
data unit received from a member of the first virtual 
closed user group on the shared conimunication 
medium, each member of the first virtual closed user 
group having a unique destination identifier; 

(b) examining and modifying data bits within a protocol 
data unit received from a member of the second virtual 
closed user group on the shared cornmunicatioh 
medium, each me mber of the second virtual closed user 
group having a unique destination identifier; 

(c) maintaining a database of all destination identifiers 
representing members which arc currently reachable 
for delivery of protocol data units within the commu- 
nication system; 

(d) limiting access to the database such that each virtual 
dosed user group only has access to specific destina- 
tion identifiers owned by that particular virtual closed 
user group; 

(c) requiring verification that each destination identifier in 
a protocol data unit indicates a member which is 
currently reachable for delivery through a lookup in the 
database prior to completing delivery of the protocol 
data unit to the member represented by the associated 
destination identifier; 
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(0 delivering the first virtual closed user group modified 
protocol data unit to another member of the first virtual 
closed user group after verifying that the first virtual 
closed user group member destination identifier is 
currently reachable; and 3 

(g) delivering the second virtual dosed user group modi* 
ficd protocol data unit lo another member of the second 
virtual closed user group after verifying that the second 
virtual closed user group member destination identifier 
is currently reachable, step (0 and (g) being device- 10 
implemented such that a protocol data unit having a 
destination identifier which is not owned by the par- 
ticular virtual closed user group will not be delivered. 

49. The method of claim 48 wherein each examining and 
modifying step comprises modifying data bits within a l * 
received protocol data unit by deleting, inserting, and replac- 
ing bits in the received protocol data unit prior to delivering 
the modified protocol data unit to another member of the 
same virtual closed user group. 

50. The method of claim 48 wherein each examining and 20 
modifying step comprises monitoring the received protocol 
data unit by dropping, sending, sending a copy of, and 
auditing the contents of the received protocol data unit prior 

to delivering the modified protocol data unit to another 
member of the same virtual closed user group. 13 

51. The method of claim 48 wherein steps (a) through (g) 
arc performed such that all predetermined physical layer, 
link layer, and network layer access protocols used to 
communicate protocol data units over the shared commu- 
nication medium arc preserved. 
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52. The method of claim 51 wherein steps (a) through (g) 
arc performed such that all of the predetermined access 
protocols arc preserved so that any particular device capable 
of communicating on the shared communication medium 
can be a member of cither virtual closed user group by 
performing an additional step of adding a dcstinaUbn iden- 
tifier associated with the particular device to the database. 

53. The method of claim 48 further comprising a step of 
assigning incoming protocol data unit to each virtual dosed 
user group based on an access policy that is separately 
spedfied in each virtual closed user group. 

54. The method of claim 48 further comprising a step of 
providing a virtual link between the first and the second 
virtual dosed user group, the vinuai link comprising a first 
end and a second end of a data path on the shared commu- 
nication medium, each end comprising a data port in a 
different virtual dosed user group. 

55. The method of claim 54 wherein the providing step 
comprises utilizing a shared memory as the shared commu- 
nication medium to provide the virtual link. 

56. The method of claim 54 wherein the providing step 
comprises utilizing a high data transfer rate link which spans 
a geographic distance between the first and the second 
virtual closed user group to provide the virtual link. 

57. The method of claim 55 further comprising a step of 
filtering protocol data units communicated in the virtual link 
data path according to an access policy. 
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ABSTRACT 



A configuration manager for configuring a network device 
remotely coupled thereto and an associated computer* 
implemented method for con figuring the network device. 
The configuration manager includes a configuration script 
stored in a memory subsystem of a computer system and first 
and second software modules respectively executable by a 
processor subsystem of the computer system. The configu- 
ration script contains a series of executable instructions for 
constructing a configuration file ami a Ixwlptab file for a first 
specified type of network device. By executing the instruc- 
tions contained in the configuration script, the first software 
modutc may construct a configuration file su liable for 
upload to a network tie vice and a boot pt ah file suitable for 
identifying the network device. Configuration requests 
issued by the network device are processed by the second 
stiflware module by identifying the requesting network 
device using the constructed bootptab file and configuring 
the requesting network device by uploading the constructed 
configuration file thereto. 

18 Claims 12 Drawing Sheets 
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CONFIGURATION MANAGER VOH relatively complex, their administrators often have only 

NETWORK DKVICKS AND AN ASSOCIATED minimal training in internetworking administrat ion and may 

METHOD FOR PROVIDING be unfamiliar with routing technology and/or WAN tcch- 

CONFIG U RATION INFORMATION ,lolo £y 

TH ERKTO 5 l ; or example, data link protocols are used lo control access 

to networks. A IJVN typically uses the logical link control 

A portion of the disclosure of this patent document (or U UX*) subclass of the high-level data link control (or 

contains material which is subject lo copvright protection. "HDIXT) protocol as its data link protocol. However, an 

The copyright owner has no objection to the facsimile X.25-typc packet-switching WAN uses link access 

reproduction by anvoric of the patent document or the patent JO procedure, balanced (or u l J\PB w ). a protocol based on 

disclosure, as it appears in the Patent and Trademark Office 1 ">I-C as its data link protocol. The data link protocol for 

patent file or records, but otherwise reserves all copyright an ISDN-type WAN. on the other hand, may cither be a 

rights wh alsoeve r. conncclionKirieiil atcd protocol known as frame switch ing or 

a connectionless protocol known as frame relay. 

CROSS REFERENCE TO RLLAI 0D 15 Even when configuration information is available, further 

APIMJCAHON complications problems arise when transporting the con- 

Thls application is related to co-pending U.S. patent nation information to a network device. For example, in 

application Sen No. 08/603,061, filed on even date herewith. oictar to communicate with a remotely located network 

entitled METHOD AND APPARATUS FOR GUIDED device. a ™w<>& administrator needs to know where lo 

CONFIGURATION OF UNCONFIGURED NETWORK ^ *c information. However, that knowledge typically 

AND I NTURN ETWO RK DEVICES", assigned to the «»»** in the conligu ration information for the network 

Assignee of the present application and herebv incorporated device. 'Ihus, the network administrator is constrained as to 

by reference as if reproduced in its entirety. * wh3t information may be delivered to the network device 

until after the device is- configured but, until the device is 

BACKGROUND OF THE INVENTION 25 configured, much of the configuration information is uncle, 

t Field of the Invention liverable. While techniques for transporting information to 

ri L. i an uneonfiuurcd device using a limited amount of conligu- 

rhis application generally relates to computer nclworfo; ^ inf > mlkm cxbu toUleocfeii in such information 

ami internetworks and, more particularly, to a cvmhgurahoa ^ |k , te lhe task ()f lraiisfer ring information using 

manager which, from a central location, provides configu- ^ techniques 

ration information 10 remote devices included in a computer . ... f <• . 

„ „... . „ >, „ a. n»«-S " be readtlv seen from the foregoing that it 

network or internetwork. ,,? , • .t " %*e • .« <■ • 

" would l>c desirable to simplify the task of configuring a 

2. Description of Related Art remotely located network device. It is, therefore, the object 

Generally speaking, a network is a collection of user 0 f ^ invention u> provide a configuration manager ami an 

devices, generally classified as data terminal equipment (or 35 associated method of configuring a remote network device 

**DTU'*), interconnected for bi-directional exchanges of f rom 3 central location, 

information. For example, visual displays, computer svs- t 

terns and office workstations are all electronic devices das- SUMMARY OI« 11 IE INVEN HON 

sified as DTEs. A local area network (or vlj\N") is an In one embodiment, the present invention is of a configu- 

interconnection of plural computer systems distributed ao ration manager for configuring a network device remotely 

around a single site. A wide area network (or *'WAN") is an coupled thereto. The configuration manager includes a con* 

interconnection of plural computer systems located at dif- figuration script stored in a memory subsystem of a com- 

fereni sites. Traditionally, computer systems have used putcr system and first and second software modules rcspec- 

modems to connec! to a WAN via the public switched lively executable by a processor subsystem of the computer 

telephone network (or "PSTN"') or public switched data 45 system. Ittc configuration script contains a series of execut- 

network (or "PSDN"). In recent years, WANs which utilize able instructions for constructing a configuration file and a 

integrated services digital networks (or "ISDNs'O. which bootplah file for a first specified type of network device. By 

enable data to be transmitted without modems, to intercon- executing the instructions contained in the configuration 

nect computer systems have become mure common. Finally. script, tlie fust software module may construct a conligura* 

an internetwork is a collection of networks interconnected sa lion file suitable for upload lo a network device and a 

by a WAN. bootplah file suitable for identifying the network device. 

Devices are initially unconfigured when delivered by the Configu ration requests issued by the network device are 
factory. Configuration is a process during which the hard- processed by the second software module by identifying the 
ware and software of an unconfigured device is organized requesting network device using the constructed bootptab 
and interconnected so that the configured device will be able 55 life and configuring the requesting network device by 
to perform the tasks desired thereof. As is well appreciated uploading the constructed configuration file thereto, 
in the art* the wide variety of devices which may be installed In one aspect of this embodiment of the invention, the 
on a network, as well as the variety of networks which may configuration script includes a first section which contains a 
be connected to form an internetwork, makes the configu- series of configuration commands which generate requests 
ration of networks and internetworks a difficult task which 00 for information such that information received by the first 
requires highly detailed technical knowledge of the various software module in response lo the requests for information 
networks, the protocols used to link with the various net- is used to construct die configuration and bootptab files. In 
works and the devices lo be installed thereon, Thus, con- another aspect of this embodiment of the invention, the 
figuration of network devices is often one of the most configuration script includes a second section which con- 
daunting tasks facing a network administrator, particularly <>5 tains a >et of connection rules for connecting the first 
for those in charge of small and iiK-dium size networks have specified type of network device to at least one other 
between 100 and 1.000 nodes. While such networks are specified type of network device. 
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In a related aspect thereof, the second section of the FIG. 1A Is a simplified bloc* diagram of a computer 

configuration script includes a first portion which uniquely .system on which a network device configuration tool may he 

identifies the network device and a second portion which installed: 

identifies devices installed in the network device. In another F1C 1U is a block diagram of a network device conligu- 

rctatcd aspect thereof, the first section of the configuration 5 ra ti 0 n tool constructed in accordance with the teachings of 

script includes a first portion which corresponds to each of , nc p rese nt invention; 

the at least one other specified type of network device RG 2A fa a h|fick <H rf a wnH g Ufalioil s^pts 

spccifial in the wnnectmn rules contained in the second ion (|f Jhe |lclwork ^g^o,, lo0 | of FIG. I; 
section or the configuration script. Lach such portion am- 

tains a subset of the series of configuration commands 10 HU 2 » * ^ M **S^J rf a " rib,,WS 

contained in the first section of the configuration script and cf 3 wnliguration script of Hd. 2A; 

each such subset of configurai ion commands are executed FIG. 2C is an expanded block diagram of a bitmap section 

only if the network device for which the configuration file is of a configuration script or FIG. 2A; 

being constructed is connected to a network device of the FIG. 2D is an expanded block diagram of a bitmap menu 

other specified type of network device. is section of a configuration script of FIG. 2A; 

In another embodiment, the present invention Ls of a FIG. 2E is an expanded block diagram of a guided 

computer-implemented method for configuring a remotely configuration section of a configuration script of FIG. 2 A; 

toted network device. A request for configuration issued RG 3A Ls a now ctur , of 0 mcthtx) for gu i<ii„g comlgu. 

by a network device isdetected. If a previously constructed ral ion of a network device in accordance with the (cachings 

configuration file corresponds to the network device issuing zo 0 f |[jc pj^nt invention- 

the request for configuration, a reply which identifies^ the p , ^ fe a fl()w ^ of a ^ wf |Iw ftw 

contiguralion lile is transmitted to the network device. Ir*e ^ ^ ^ . 

configuration lile is then transmitted to the network device /' • 

in response to a request for the identified configuration file. , » a rt ™ < h f ^ f u s ldcd configuration subsec- 

The configuration tile is constructed using a configuration 25 ■«» <* lhfi flow chart of HG. 3»; 

script containing a series of executable instructions for « a flow chart of a method lor determining 
constructing a configuration file for a first specified type of whether a pair of network devices are comicctable; 
network device is provided. The configuration file is then FKi. 4 illustrates a configuration manager GUI for con- 
constructed by executing the scries of instruct kins contained structing a map of configured network devices with a 
in the configuration script. In one aspect thereof, the con- prcconstrucied network configuration map in a network 
figuration scri pi includes a first section eonla i nirsg a series of workspace port io n thereof; 

configuration commands, Requests for information arc FIG. 5 illustrates an exemplary guided configuration GUI 

issued by executing the scries of configuration commands for constructing a configuration script for a network device; 

contained in the first section of the configuration script and no. 6 illustrates a backplane bitmap for a configured 

information received in response to the requests for infor- 35 network device; 

mation Ls used to construct the configuration file lite FIG, 7 illustrates the configuration manager GUI of FIG. 

information may also be used to construct a bootptab tile 4 with a prccorLSlruclct , ^waik configuration map modified 

wliich.m addition to the configuration file, contains a unique ^Mute newlv added and configured devices thereon; 

identifier for the network device. ...... u . * . . e ., * <■ r • 

.... . . . . bid. 8 is a flowchart of a method of configuring a remote 

In another aspect of tins embodiment of the invent .on a 40 ^ ^^ce with another aspect of the 

determination o whether the configuration tile corresponds invention; and 

10 ihc network device issuing ihe request for confmuration is -..»,' , » ,>,„ . ... 

accomplished by determining if tlx f network device Issuing HO. ? .Uustrates a pop-up bootP GUI in winch an 

the request for configuration lias an kientiikatkm code ««f««^ device is requesting configuration 

which matches an identification code contained in the 45 uworaiatwn. 

Ixiotptab file and determining if devices installed in the DETAILED DESCRIPTION 
network device issuing the request for configuration match 

the installed devices identified in the bootptab file. Referring first to FIG. I A. a computer system 2 suitable 

In yet another aspect of this embodiment of the invention, ftlf lusuU /"S a itctwurk device configuration tool thereon 

ihe provided configuration script mav also include a second » «"iy ™ w * ** n - l>1c «JW«« «**™ 2 is comprised of a 

section containing a set of connection rules for connecting ****** whqjiiem * «=mplc. a type W Ptnltum 

the first specified tvpc of network device to at least one other ff£'* w m ? n " racll,rc<, b >* lnld Corporation of Santa ( lara, 

specified type of network device. Within the second section. Calif, coupled to a memory subsystem 6. for example, a 

a first portion corresponding 10 each of the at least one other har<1 *™ « mhcf aux, ! ia ;y ^""^ ^ ***** " f 

specified 1 vpp of network device specified in the conneciion « s,ofm S ,3r ^ c a,wn,nts , " f tb,a ««M"<=ntly used by the 

rules amtained in the second section of the configuration pnxx^.r ^bsysten, 4, by a system bus 8. J^My. > 

script mav also be pmvided. Each first portion contains a *24w wtde peripheral connection interface (or ; PCI ) bits, 

subset of 'the scries of configuration commands which are Al *> ""J*" 1 l « thc . s ^ em f . ius 8 LS . a |»f » nlcrfa « ?* 

executed only if the network device for which the configu- Commonly, the user interface ts composed of three penph- 

ration file is being constructed is connected to a network « cnl video dtsplay. a keylxtaaf and a pointing 

device of the other specified tvpc of network device. device. 

Referring now to FIG. 1 B, a network device configuration 

BRIliF UluSCRIimON OF TOE DRAWINCi , 0 constructed in accordance with tlw teachings of the 

'llic present invention may Ik better understood, and its present invention will now be dcscrilxd in greater detail, 

numerous objects, features and advantages will become S5 lite network device configuration tool 10 is graphical user 

apparent to those skilled in the an by reference to the interface (or u GUO based software launchable from a 

accompanying drawing, in which: suitable platform installed on the computer system 2. For 
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example, Windows 95 ami Windows NT 3.5 K both manu- the configuration tool in a manner to be more fully described 

factured by Microsoft of Redmond. Wash,, are suitable below. Broadly speaking, a local configuration file 20 is 

platforms from which the network device configuration tool modified for upload to tlx; corresponding network device 26 

10 may be. launched. b V formatting the local file into the appropriate IP address 

i_ ; t ■ . , . ... -..^-j. ,v»«iw«.r«<;«f» 5 *° r ,r * ,ar 8 el network device 26 .Finally, the network device 

in Us broad^ ^ a^J^^Mto^tt^^Mm^to 

tool 10 pmvKks a GUI tn which the so-called ' drag ami ^ amf |U)n ftlc}> 20 and ,he network auugura- 

drop process ls used to construct a network conhgurahon ^ fi|ejt ^ ^ ^ ^ w W(lSlruct , 

map comprised of a series of interconnected network ^ u , n]ig!ir3|ion , Uc 20 from a network configuration file 

devices and,or network entities. for example, a IAN. WAN 22 Oownbwled to the network configuration tool 10 bv the 

or other network, from a combination of user inputs, net- JJ nclwor j» c t C vicc 26 

work configuration maps, configuration scripts and local ft fe ^^p,^. |hjl lhc dcvicC c^un-jon 

con Jjgurai ion tiles. Kw| lQ ^ ^ instalM in , hc a)mpulcr SV stem 2 operated 

in constructing the network configuration map, a series of Ry a nclwork administrator and that plural network devices 

local configuration files are constructed for the network 2 $ and olher network entities, onlv one of which is shown 

devices and appended to the network configuration map. The - in RG • ,,. !or e3Se of fflustratkm, wouki he coupled to the 

local configuration files contain information, for example, nelW ork device configuration tool 10. Utilizing the network 

internet protocol (or "IP") address, default gateway, router device configuration tool 10, the network administrator mav 

name and simplified network management protocol (or buU(1 a representative network configuration map for the 

'•SNMin community strings, necessary for the network network. The network administrator mav ihen configure 

device, for example, a router, to properly communicate on - remol ciy kjt3tC(J network devices by uploading configura- 

lhc network. ,j on j,^ constructed during the process of building the 

For each network device for which a local configuration network configuration map to the devices. Thus, by using tttc 

file has been constructed, the network device configuration network amfiguration tool, the network administrator can, 

tooMO may also construct a network device configuration from a central location, design a suitable configuration 

file suitable for export to the network device itself. In this ~ network awl then configure any number of remotely located 

manner, remote configuration of network devices is enabled. devices included in the network. 

As shown in 1*10. IB, the network device configuration 'Itie network device configuration tool 10 is coupled to the 

tool 10 may Ik representatively illustrated as being com- network device 26 by an asynchronous interlace 28 and a 

prised of two software modules, map editor 14 andconftgu- ^ boot protocol (or "bootp 'tflrivial file transfer protocol (or 

ratkm guide 18, both of which arc executable by the pro- -'TFflH manager 30. Under the control of an asynchronous 

eessor subsystem 4, which retrieve data and programming manager (not shown), a software process within the proces- 

ittsiruetions from various locations within the memory sub- sor subsystem 4, the asynchronous interface 28 is used to 

system 8 of the computer system 2 on which the network exchange configuration information, for example, a network 

device configuration tool 10 is installed. , 5 configuration file 20, by either an in-band transfer via 

Hie data and programming instruction are stored in the in-hand connection ,29a > for example, via telnet, or by an 

memory subsystem 6 as a series of files which may Ix: out-of-band transfer via out-of4iaml connection 29b, for 

selectively accessed by the map editor 14 anuVor the con- example, via modem. Atklitionally, the bootp/ITTP man- 

figuration guide 18. Tiles which are accessible to the map ager 30, another software process within the processor 

editor 14 and/or the coiifigu rat (on guide 18 are con figuration ^ jiiihsystem 4, controls the exclungc of hooip and Tl-TP 

scripts 12, map files 16, local configuration files 20 and messages l>c I ween t lie network device configuration tool. 10 

network configuration files 22. Hie configuration scripts 12 and the network device 26. Generally, a bootp exchange is 

identify the types of network devices ami network entities used to traasfcr raw address and other basic information so 

which may be placed on the network configuration map and that a WW exchange may then be used to t ransfcr contigu- 

interconnected with other network entities and network 45 ration information. The bootp/TITP manager 30 also con- 

deviees. 'Hie configuratkm scripts 12 also identify the net- trots accesses to bootptab files 32. 

work devices which are configurable by the network device As will be more fully -described with respect to TIG. 3. 

configuration tool 10 and contain information necessary lo IkIow, the configuration scripts 12 are used to direct map 

construct configuration files for tltose network devices. If a cditot 14 and configura) ion guide 18 in a guided coufigu- 

particular network device does not have a configuration 50 ration of a selected network device 26 by guiding in lite 

script, a configuration file cannot be constructed by the construction of a configuration file for the device, 

network device configuration tool 10. The map files 16 Accordingly, turning momentarily to TIG. 2A, the eonfigu- 

contain a series of network configurat ion maps, each com- ration scripts 12 used to guide the conligurat ion of a selected 

prised of a series of interconnected network devices and network device 26 will now be described in greater detail, 

network entities, constructed using the network device con- 55 As may now be seen, the configuration scripts 12 arc 

figuration tool 10. 'Hie local configuration files 20 contain comprised of a series of separate scripts 12-1 through 12-N, 

information which, if uploaded to the corresponding net* one for each type of device which may configured by the 

work device 26, would enable con figuration of that device. configuration tool 12. Each script 12-1 through 12-N is 

If local configuration files 20 are constructed for the network comprised of an attributes section 34, a bitmap section 36, 

devices illustrated on the network configuration map(s) 16 $n a bitmap menu section 38 and a guided configuration section 

produced using the network device configuration tool 10, 40. Each of these sections 34, 36, 38 and 40 is a selectively 

such local configuration files 20 arc associated with the executable set of commands which may be used during 

corresponding network device such that they maybe directly configuration of a device of the type corresponding to a 

accessed from the network configuration maps 16. particular script 12-1 through 12-N. 

The network configuration files 22 arc similar in content 65 fuming now to FIG. 213, the attributes section 34 is 

to the tocal configuration files 20 except that the files have comprised of an icon portion 34«. a network entity portion 

been formatted for upload to a network device 26 coupled to 34/>, a description portion 34c aud a series of connection 
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portions 34</-l through 34</-N. A valid icon filename iden- 
tifying the graphical icon to Ik associated with the device 
type corresponding to the eonfigu ration script 12-N is eon- 
laincd in the icon portion 34a. As will be more fully 
described below, this icon will appear in a device window of 
a configuration GUI and can be dragged onto a network 
workspace to add a device of that type to a network 
configuration map. 'Hie network entity portion 34fr provides 
a unique name for the type of device and appears in the 
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The bitmap 36 will include a representation of an ctherncl- 
lype network entity stored at TI.ANJ.iMP drawn on lop of 
device window under the icon. The description portion 34c to the representation of a backplane of a router stored at 

ROUTER-JIMP at ■coordinates 20, 40 if the "liihcrneT-lypc 



defines a default description for the device which pre 
populates the dialog box when a device type is dragged onto 
ittc network workspace. Finally, the connection portions 
34<A1 though 34</-N provides connection statements for the 
device type. SperihcaHy, a connection portion 34</ will Ik 
provided for pon, modular slut or other type of connection 
interlace for the device type. Each connection state mcnt will 
include a physical name for the port or other type of 
«>riruiction interface ami the network entity names for all 
other types of devices which may Ik* connected to the port. 
For example, if the network device was a modular router 
having 4 PCI slots, each connect able to cthcrnct. X.25, 
frame relay, PPPand I DSN type entities, and an elhcrnet port 
connectable to an elhernet entity, the attributes section 34 
could lie as set forth in the following code: 
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network entity is plugged into "Slot ! 

'I*he bitmap menu section 38 defines a menu hierarchy 
presented to the user for hot spots, for example, connected 
15 slots, on the bitmap and the executable commands for each 
item included in a command menu, lite command menu is 
displayed when the network administrator clicks on a con- 
nected skit on the bitmap. The bitmap menu section 38 is 
subdivided into network entity command sections 38a- 1 
zo through 3&/-X. Specifically, for each network entity for 
which connection to the device is allowed, a corresponding 
network entity command section is provided such that, if 
that network entity is connected to the device, the commands 
defined in the section will be displayed to the network 
25 administrator for selective execution thereof. 

The guided configuration section 40 defines the GUIs 
used in gukle a user through configuration of a device ami 
controls the configuration file to be constructed using user 
responses to the GUIs. As illustrated in FIG. 2D, the guided 
50 configuration section 40 is subdivided into a general script 
command portion 40i/ and a port script command portion 
40M through 40fr-N for each port to which the device is 
connectable. A guided configuration script for a Cisco 2514 
router is set forth in Appendix A by way of example and will 
35 he described in greater detail with respect to FIG. 3-D, 
below. 

Returning now to FIG. IB, the network device configu- 
ration tool 10 will now be described in greater detail. 
Generally, the map editor 14 controls the generation of a 
40 map of a network configuration while delegating the task of 
configuring unconfigured devices placed on the network 
txm fixation map to the configuration guide 18. Upon 
initiation of the configuration process, the map editor 14 
selectively retrieves a map file 16, or creates a blank map, 



Turning next to FIG. 20, the bitmap section 36 defines the 
"drill down" bitmap which is presented to lite network 
administrator upon requesting subsequent configuration of a 
configured network device. The bitmap section 36 also 
defines any necessary overlay bitmaps as well as provides 45 f orc dui^ 



the locations of u hot spots" on the bitmap. The bitmap is a 
graphical representation of the backplane of the configured 
device which provides connection information fur the ports 
thereof. ''Hot spots" on the bitmap are paths to additional 



configuration, map, the map editor 14 retrieves the corre- 
sponding configuration Script 12-N from the configuration 
scripts 12 and, using the information contained in the 
retrieved configuration script 12-N. places an unconfigured 



information related to the connected ports for the configured 50 Jcvicc of lhc ^bari type on the network configuration map 
network device. an j append** a name for the device to the map. The map 

Bitmap file portion 36n names a valid window bitmap editor 14 performs all operations in which editing of the 
formal file which will be displayed in its own window when network configuration map is proposed. For example, if a 
lite network administrator double clicks on a configured connection between two devices placed on the network 
network device. For each connected port of the configured 55 configuration map Is proposed, the map editor 14 reviews 
network device, the bitmap section 36 will also include a ihe configuration scripts 12 for the devices and, if a con- 
location port port ion 366-1 through 36rVN which provides 
the location of the hot spot for the connected port on ihe 
bitmap. Finally, the bitmap section includes an overlay 
device bitmap file 36c- 1 through 36c-x for each type of ^ 
network device or entity which Is connectable to the con- 
figured network device. Then, if the configured device is 
connected to that particular network entity, the network 
entity can be represented on the bitmap. 

Iw example, if the bitmap 36 is comprised of a bit map file <i5 if configuration of a network device Is requested, the con- 
3f«i. port locations 36M and 36f>-2 and overlay device file figuration guide 18 will retrieve the configuration script 
36<i- 1 as set forth in the sample axle beknv: 12-N for that type of network device and execute the 



nection between the two devices is permitted, the map editor 
14 completes the proposed am nection and appends the 
connection information to the network configuration map. 
If a request to configure a device placed on the network 
configuration map is received, the map editor 14 transfers 
the name and connection information for the device to the 
configuration guide 18 and instructs the configuration guide 
18 to perform the requested configuration task- For example. 
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instructions contained in the guided configuration section 40 
thereof. Using the information provided by tlte configuration 
script 12. the map editor 14 and input provided by the 
network administrator in response to execution of the 
instructions contained in the guided configuration section 
40, the configuration guide 18 builds a local configuration 
file, associated with the device, for use by the network 
administrator and a eorresjxmding network configuration 
file suitable for upload to the network device to enable 
configuration of the network device. 

Referring next to FIG. 3 A, the method for guiding con- 
figuration of a network device by constructing a configura- 
tion file for the network device which is the subject of the 
present invention shall now be described in greater detail, It 
should be clearly understood, however, that the illustrated 
order of steps is purely exemplary and should not be 
construed as limiting the scope of the invention, llie method 
commences at step 42 by launching the network device 
configuration tool 10 from a platform such as Windows '95 
by selecting an icon previously designated as providing a 
path to the network device configuration tool 10. 

Proceeding lo step 44, once bunched, the network device 
configuration tool 10 generates a configuration manager 
GUI 100 (see RG. 4) which provides a network workspace 
102 and a device window 104. In the network workspace 
102, a map comprised of any number of interconnected 
network devices, each having a configuration tied thereto, 
may be produced. Hie device window 104. on the other 
hand, displays all of the types of network devices which may 
be placed oh the network workspace 102. Continuing on to 
step 46, for each type of network device for which a 
configuration script 12-N has been prepared and stored in 
the memory subsystem 6, the net work device configuration 
tool. 10 places an icon representative of the network device 
type in itio device type window 104 to indicate to the user 
which types of network devices arc configurable by the 
network device configuration tool 10. l : or example, the 
device window 104 illustrated in FIG. 4 includes icons 
representative of a Ml 1 link, a vendor specific modular 
router, an ISDN-type WAN. an lithernct-typc I .AN, a non- 
vendor specific computer subsystem, an X.25-typc packet- 
switching WAN, and an ISDN-type WAN which suliscribes 
to frame relay-mode service. Atstep 48, tlte network device 
configuration tool 10 loads a blank map into the network 
workspace 102. At this stage, the network device configu- 
ration tool 10 has completed loading the configuration 
manager GUI 100 and is ready to execute selected com- 
mands in response lo inputs received from the network 
administrator via the user interface 9. 

Proceeding on lo step 50. the network administrator 
selects a command, either from one of the pull -down menus 
listed on the pull-down menu bar 108 or by depressing a 
command button displayed on command button bar MO. The 
menus displayed on the pull -down menu bar 108 are "file", 
"edit", "network", "window" and "help". By selecting one 
of these menus, a series of commands, each of which relates 
to the selected menu, are displayed. Available file commands 
are "new", "open", "save", "save as", "print", "print setup" 
and "exit". The new command clears the network workspace 
102 of any network configuration map placed thereon. Itie 
open command allows the network admin istraior lo select a 
network configuration map lo be placed on lite network 
workspace 102. Hie save and save as commands stores the 
map placed on the network workspace 1 02 to the memory 
subsystem 6. The print command prints the network con- 
figuration map placed on network workspace 102. Ine print 
setup command displays the printer configuration for the 
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computer system 10. Hie exit command closes the network 
configuration tool. 

Commands available under the edil menu are "draw 
mode", "mow mode", "workspace properties", "edil 

5 device ". "view/con figu re device", "delete device*', "all ports 
connected configuration", •'update configuration", "retrieve 
configuration", "associate configuration", "telnet to this 
device". The draw mode command allows the network 
administrator lo draw connections between devices dis- 

to played on the network workspace 102. 'lite workspace 
properties command is, in fact, a second pull-down menu 
which allows the network administrator to taiktr the map 
placed in the network workspace 102. Commands available 
under the workspace properties menu are ti vicw entity 

15 name", "view entity description", 'view entity connections", 
"view ip addresses", "view ipx addresses", all of which add 
the listed information to the display of each device on the 
map, ami the "snap to grid" and "view grid", both of which 
orientate the map to a grid. 

20 The edit device command accesses the configuration 
information associated with a selected network device. 'l"he 
view/con figure command displays a view of the backplane 
of a selected configured network device dr. if the selected 
network device is unconfigured, defaults to the configuration 

55 dialog set forUi in greater detail below. I"he delete device 
command removes a selected network device or entity from 
the network workspace, lite all ports configured, u|xlaie 
configuration provides access to a selected device's con- 
figuration file. The retrieve configuration file allows the 

30 network administrator to directly access a configuration file 
stored in the memory suljsysiem 6 while the associate 
configuration command permits the network administrator 
to append a configuration file to a device. The telnet to the 
device command initiates an in-hand transfer of configura- 

35 lion information from the network device configuration tool 
10 to tlx; network device 26. 

Commands available under the network menu ore 
"bootptab maintenance", "enable boolp server", "disable 
bootp server", "enable '11*11' Server*", "disable WW server" 

40 ami "view network activity log". All of these commands are 
relate to the exchange of configuration information between 
the network device configuration tool 10 and the network 
device 26. More specifically, the bootptab maintenance 
command enables the network administrator to review pre- 

45 viously constructed bootpfab files 32. 'Hie enable/disable 
fxxitp server commands control the operation of the com- 
puter system 2 on which the network device configuration 
too! 10 operates as a bootp server, i.e. is capable of sending 
ami/or receiving boolp messages via the bootp/TFrP man- 

50 ager 30. When enabled as a bootp server, the computer 
system 2 listens for bootp requests placed on the network by 
devices requesting configuration information. 'Hie enable/ 
disable TITH server commands control operation of the 
computer system 2 on which the network device configu- 

55 ration tool 10 operates as a 11T1* server, i.e. is capable of 
sending and/or receiving IYIV messages via the bootp/ 
TF1V interface 30. Finally, the view network activity log 
provides a historical display of exchanges between the 
network device configuration tool JO and network devices 

60 requesting configuration. 

Commands under the window menu are "arrange", "con- 
figuration files" "workspace", "requesting router" and u net- 
work devices". The arrange command is a pull -down menu 
which pmvides a set of commands which modify the appear* 

t>5 ance of the configuration management GUI 100. The con- 
figu rat km files command displays the configuration files 
stored in the memory' subsystem. The workspace and net- 
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work device commands respectively move the network selected type is added to ihc network map. For example, in 

administrator to the network workspace 102 and ihc device FIG. 7, a single network device, i.e., a modular router 122 

window 104. FinaUv. the requesting router command pro- manufacture by Compaq Computer Corporation, and a pair 

vidts a list of network devices 26 requesting IP addresses oT network entities, ix.. ethcrnct type lANs 124 and 126 

ami cemfiguration files from the network device configure- .5 » avc atWctl ^ network configuration map 106. 
lion tool 10 ^ acn network device- and/or network entity added to the 

Ihe command button har 110 prides immediate execu- « CIWO f k configuration map 106 is aviated with a corre- 

tioo or selected commands available from the pull-down spoochng one of the configuration wnpu 12-N, Accordingly, 

menus 108. The commands which mav be executed from the al *P.«f. ** ,na P ^ ,,or l< f «^3» thc . namc of ! hc 

commaiKl button bar 110 are new, open, save, print, draw in network <lev,cc or entity contained in the a llnbules section 

mode, move mode, nctwod; devkvs, workspace, r«,uesting 34 » f ,l * coffC-spoitding configuration script 12-N as the 

router, view network activity k>g and help. Mm * » f «» ntw| y device ^or cnuiy. lor 

Proceeding to step 52, .he network administrator executes « 3m P k > the name of ihc network dcv.ee 121 added to the 

the command selected a. step 50. For example, if the network configuration map 106 is "Compaq Rooter, 
network administrator decides to retrieve an existing net- 15 "P"? ? Jac ' n S > as unconnected network device 122 

work configuration map stored in memory, the network ami cntu.es 124, 126 on the network wn figuration map 106. 

administrator mav click on the "open map" command button or » f « vvas *«*<* at S,C P 5° u> not add a ™f v ? r dc ?~ 

on the command button bar lo display a list of map files 16 « r M ln < "J""* configuration map 106, the method 

stored in memory and then select a map file to be opened! An P«** c<k "« *«V 66 Ihc network administrator decides 
exemplary network configuration map 106 which may be a "J ^Kf* lh f ^ oelWft * *T W ?* 

stored in memory is illustrated in FIG. 4. lite network cn, | t ! cs I 22 - 124 and L 126 lo om " ."r^ 0 * ^f" 

configuration map 106 is comprised of a vendor specific cnl,,,c *- lor sample, the network ad mints! rat or may decKlc 

device 112. here, a modular router manufactured bv Compaq »« connecl u * Compaq router 122 to the frame rclay-tyjw 

Computer Corporation of Houston, Tex., having a first VVAN m > the ethcrnet-type LAN 124 ami the eihcrncMypc 
peripheral connection interface (or W) slot coupled to a 25 126 If ,he ™™* k a «"™«f'alor to connect 

first ethernet-tvpc LAN 114, a second PC! slot coupled to a ,hc Compaq router 122 to the et hcrnet - type IAN 1 24, the 

second clhcmci-iypc IAN 116. a third PCI slot coupled to methml poieeeds to step 6« where the network administrator 

a frame relav-tvpc* WAN UK and an etheniei ptm coupled to winM the Compaq n>uter 122 by holding a leftmost 

a third ethernet-lvpe I AN 1 20 bullon on lnc mousc m lhc "^pressed position while pointing 

Continuing on 'to step 54. the network administrator then *> thc ^mpaq router 122, draw a connection between the 

decides whether to edit the network configuration map 106 Gwipaq. ™ter 122 and the ethernet-type IAN 124 by 

displayed in the network workspace 102. If the network re t **ttioning the mouse to point at the ethernet-type LAN 

administrator deckles not to edit the network configuration 124 while the button isdepressed and releasing the button to 

map 106. the method proceeds to step 56 where the network complete the connection. 

administrator decides whether to execute another command. 35 Continuing on to step 70, the map editor 14 determines 

if so, the method returns to step 56. Otherwise, the network wbe,her lhtt V*Pf*** connection * pcrmi&stWe. U the 

administrator closes the network configuration tool at step Proposed connection is permitted, the line drawn by the 

SK lo end the method ~ network administrator is completed at step 72. Inc connec- 

Rcturnihg now to step 54, if the network administrator ifaiPtofi&to for the origination device are then placed on 

decides to go to the network workspace 102 to edit either the «o lhc » tlwork configuration map 106 arid the method contra, 

blank map initially loaded into the network workspace 102 u « " n to step 74 for further editing of the network conltgu- 
at step 48 or, if a saved map was retrieved from the map files m3 P m f rtf example, as shown in FI6. 7. PU slot 

16 bv executing an -open file" command at step 52, the 1 * f ,he Com PfI ™ lcr 122 *»* ^ ,,sal t ^ connect «*■ 
retrieved map loaded into the network workspace at step 52, 10 thc cthcrneWype 1 AN 126, PCI slot 2 to connect 

the method proceeds lo step 59 (FIG. 3H) where llic network 45 10 tbv lramc relay-type WAN UH and PCI slot 4 to connect 

administrator decides whether to edit the map displayed in lo lhc clhcmct-iypc IAN 124. If, however .the proposed 

the network workspace 102. if the network administrator connection is not permitted, the line drawn by the user is 

decides not to edit the map, the method returns to step 56 dckl « J « * ,C P 76 wnttnuing on to step 74. 
(RG. 3A). If. however, the network administrator decides to Returning to step 70, the method by winch the map editor 

edit thc configuration network map 106 displavcd in the 50 ^determines whether the proposed connection is permitted 
network workspace 102 the method proceeds io step 60 now be describetl in greater detail. An initial tenm- 

wliere editing of thc map commences. l1a,io " as 10 whether the projK>sed connection is permissible 

At step 60, the network administrator mav select a device Ls made basctl u P° n lhc conUnls t,f Ihe attributes section 34 

type displayed in device lypc window 104 and add a device <> f lht «mfiguration scnpLs 12-N lor the devices placed on 

of the selected ivpe to the map 106 displayed in network J5 Uly » na P m - l?w sample, the configuration script lor a 

workspace 102. Proceeding to step 62. to add a device of a c *™ 2514 r ^ ,cr » forth m lhc « lachcd appendix. A 

tvpe displayed in the device type window 104 to the network l K,rlio « ol lhc . attributes section of the configuration script 

configuration map 106 displayed in the network workspace contains the folkiwing code: 

102, the user sclcets *a icon representing a desired device 

type ami, using the "drag and drop** process, places the icon «p CWXECr -KniKRNtmr nahemer 

on the network amfiguration map 106 dLspbyed in the ancxiicr "CTiiBRNirn" -thhcmtr 

network workspace 102. For example, using a mouse or CONMSCT -SliRtAli)** -X.2S" -Rame Retav^-PPT -IIIM.C 

other conventional pointing device, die user would point lo CONNECT ^ERIAU" -X.25" "Krsn« Bcfcsv" -PPT -lllM.C" 

an icon representing the iUcdicd device type, select the g 1995 €<>em Ce,mipuicl ° Qt ^ ft ' t&a 

device type by holding a leftmost button on the mouse in the 65 

depressed position, point to the desired position on the map This portion of the configuration script code contains con- 

and release the button. By doing so. a new device of thc siderable connection information for the device. 
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Specifically, the device has four connection interfaces— two for the router, whether to configure IPX for the router, 
elhcrncl ports and two serial ports. Furthermore, the two indicate whether the router should be password protected, 
ethernet ports arc only conncetable to an ethcrnet-typc LAN choose a password for the router, indicate whether the 
entities device while the two serial ports are conncetable exuifiguralion mode for the router should be password pro- 
only to X.25. frame relay, PPP and II Dl. C entities, 5 lectcd and choose a password for the con figuration mode. 
Accordingly, at step 70, the mapper compares the lis! of Proceeding to step 82, the configuration guide 18 deter- 
nctwork device or entity types which are connect able for the mines whether any ports of tlie device being configured are 
two devices and/or entities for which connection is pro- connected to a second device or entity. If any of the ports are 
posed. If the devices and/or entities are conncetable, the connected, the method proceeds to step 84 where the con- 
method proceeds to step 72 where connection of the two to figuration guide 18 executes the script. commands for the 
devices andA>r continues. connected ports. Tor example, if serial port I of a Cisco 

Turning momentarily to FIG. 3D, the step of connecting router 2514 was connected to a WAN, the configuration 

the two devices and/or entities will now be tlcscribed m guide 18 would execute the script commands set forth in 

greater detail. The method commences at step 150 and scriall port ion of the script commands set forth in Appendix 

continues on to step 152 where the configuration tile for the t5 A. Thus, in this example, the network administrator would 

origination device or entity is reviewed to determine if the be asked whether the serial port should be configured, the IP" 

origination device or entity has an available slot which is address and mask for the port, the IPX network number, 

conncetable to the destination device or entity and to step whether (he port should Ik configured for frame relay, the 

154 where the configuration file for the destination device or type of connector being used for the port, the local data link 

entity is reviewed to determine if the destination device or :o connection identifier (or "PIXl' ), the Committed Informs- 

enlily has an available slot which is conncetable to the lion Rate (or %-IR-**) and the Excess Information Rate (or 

origination device or entity. If either the origination or '•liIR*) for. the port and whether to use compression, 
destination device or entity do not have an available slot The configuration guide 18 collects the info mi at ion nec- 

which is GOitificitHabie to the otter device: or emit?, a* deter- essary to configure the device by engaging the network 

munition is made at istep 156 thai the tlcvicev'enliltes cannot is administrator in a dialog during which the configuration 

Ik connected. The proposed connection is then deleted at guide 18 generates a scries of GUIs, each of which displays 

step 158 and, com inning on to step 166, the method returns a. request for information and provides areas in which the 

to step 72. requested information may be inputted and buttons for 

Returning to step 154, if it is determined that Kxh the guiding the network administrator through the dialogue. By 

origination and destination devices or entities have available .V) way of example, an IP address GUI 200 is illustrated in FIG; 

slots, the method proceeds to step 160 where a connection 5. The network administrator may input the IP address and 

interface is selected for the originating device and on to step ma*k for the indicated slot and device by respectively 

162 where a connection interface is selected for the desti* entering the IP address and mask in areas 202 and 204. The 

nation device or entity. At both Of these steps, the network network administrator may also review a prior GUI in the 

administrator may select any one of a list of available 35 dialogue by depressing button 206, proceed to the next GUI 

connection interfaces overtayed oo the network configura- in the dialogue by depressing button 208. request hc)p by 

tion map 106 by the network device configuration tool 10. depressing button 210 or exit the configuration dialog by 

If only one connection interface is available for a device or depressing button 212 

entity, however, the map wBj automatically select the avail- Upon successful execution of the script commands for the 

able interface anil indicate its selection of the connection 40 connected jxirts al step 84, or if it was determined at step 82 

interface to the network administrator. Upon selecting con- that no ports are connected for the device being configured, 

nection interfaces for the dev ices or entities, the method the configuration -dialog is completed at step 86 and, at step 

proceeds to step 164 where the selected connection interface 88, the information provided by the network administrator 

for the device 122 is displayed on the network configuration during ike dialogue is used to construct a loca I configu ration 

map 106 and on to step: 166 for a return to step 72. 45 file 20 fur the device. If desired, the network administrator 

Upon either a decision not to connect devices or entities may view the tocal configuration file 20 constructed during 

at step 66, a complct ion of a proposed connection 3t step 72 this process at step 90, directly edit any of the configuration 

ora deletion of a proposed connection at step 76, tlie method commands contained t lie re in at step 92 before saving the 

proceeds to Step 74wherc the network administrator decides constructed local configuration Ale. 20 to the memory sub- 

whether to configure a device. To initiate configuration of a so system and associating it with the device. Selected portions 

selected unconfigured device, the network administrator of the configuration information contained in the local 

double clicks on the device to be configured. At step 78 configuration file 20 may be displayed on the network 

(FIG; 3C) the configuration guide 18 retrieves the guided configuration map 106. For example, FIG. 7 displays the IP 

configuration section 40 from the configuration script 12-N address and mask for PCI slot 1 of the Compaq router 122 

for the type of device to be configured and, proceeding to 55 which was input by the network administrator during eon- 

step 80, executes the script commands contained in the figuration of the device. The network configuration map 106 

general script commands portion 40<7 of the guided configu- may also include a indicator 128. for example, a loop 

ration section 40. In turn, the execution of the script com- surrounding a device, which indicates that a devkc has l>een 

mamfc causes a series of questions to be asked of the configured. 

network administrator, the answers to which are used to t*> I laving successfully coiistntcted a local configuration file 

construct a configuration file. For example, if the script 20 and associated it with the device being configured, the 

commands set forth in the guided configuration section of method proceeds to step 96 (FIG: 3D) where the network 

the configuration script set forth in Appendix A were administrator decides whether to uptoad the configuration 

executed during configuration of a Cisco 251.4 router, the file to the device. If upload is selected, the method proceeds 

network administrator would be asked to name the router, 65 to step 97 where the constructed configuration file is 

indicate whe titer to conftgu re inter uet protocol (or "IP") for uploaded to the network device 26. Various mechanisms 

the router, indicate which I P routing protocol should lie used may be used to uptoad a constructed configuration file to tlie 
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network device 26. For example, in many circumstances, an 
in-hand transfer of the configuration file via telnet may be 
used, In other circumstances, other mechanisms more fully 
described below may lie -tccessary to transfer configuration 
information to the network device 26. 5 

Whik constructing a local configuration fite for a device, 
the network device configuration tool 10 also constructs a 
bootptab file for the device, llic bootptab (tie is particularly 
useful in those situation* where the network administrator 
decides not to upload the configuration file upon completing JQ 
the construction thereof, for example, if the network device 
is unconnected, powered down or otlierwise unavailable. A 
bootptab file for a device contains the serial number for the 
device to be configured, anil* address to assign to the device 
to be configured and the configuration file to be uploaded to 
the device. As will be more fully described with respect to 15 
FIGS. 8-9. below, the ixjotplab file provides information 
necessary for unattended remote configuration of network 
devices as they are connected to the network. 

Returning now to FIG. 31). after completing upload of the 
configuration file at step 97, or if the network administrator 20 
decided at step 96 not to upload the configuration file, the 
method proceeds to step 98 where the network administrator 
decides whet Iter to perform subsequent configuration on a 
device on the network configuration map 106. If subsequent 
configuration of a device is selected, the method proceeds to ,< 
step 99 where subsequent configuration of a selected device 
is performed from a backplane bitmap of the selected device, 
lb select a device for subsequent configuration, the network 
administrator double clicks on a configured device included 
on the network configuration map 106, By doing so, a 
bitmap of the backplane of the selected configured device is * 
displayed 

FIG. 6 illustrates a backplane bitmap 220 for the Compaq 
router 122 of FIG. 7. As may now be seen, the various 
connection interfaces used to connect the router 122 to 
network entities, as well as unconnected connection ? - 
interfaces, are graph tea Hy displayed on the backplane bit* 
map 220 using the information contained in the bitmap 
section 36 of the configuration script 12-N and the local 
configuration file 20 for the Compaq router 122. 
Specifically, for the Compaq router 122. PCI slot 1 has been 40 
used to provide a first etbernet connection 222. PCI slot 2, 
an IISSI connection 224 and PCI slot 4, a second ethcrnet 
226. PCI slot 3, however, remains unconnected. From the 
backplane bitmap 220, the network administrator may view 
the settings for a port by double clicking on a selected port 45 
or, by depressing the right mouse button, bring up a pull 
down menu of commands contaiued in the network entity 
commands section 38fl-x of the bitmap menu 38 for the 
network entity connected to the selected port and select any 
of the configuration commands listed on the pull down menu 50 CONNECT 
for execution. casvrcr 

After completing subsequent configuration of the device 
at step 99, or if the network administrator decided at step 98 
not to perform subsequent configuration, the method returns 
to step 56 (FIG. 3A). 

Turning next to FIG. 8, a method of transmitting configu- 
ration information to a network device 26 in accordance 
with the teachings of the present invention .shall now be 
described in greater detail. The method commences at step 
250 by launching the network device configuration tool 10. 
As previously stated with respect to FIG. 3 A, launch of the 
network device configuration tool 10 initiates the generation 
of ihe configuration manager GUI 100. In addition, launch 
of the network device configuration tool 10 initiates 



Proceeding to step 254. the network device configuration 
tool 10 will detect booip packets transmitted on the network 
and determine if the booip packet was issued by a device 
requesting configuration information faun the network 
device configuration tool 10. More specifically, if an uncon- 
figured network device 26 powers up on the network, the 
unconfigured network device 26 will periodically Issue a 
bootp packet which contains a medium access code (or 
•'MAC*') address for the device ami a code which indicates 
that the device is requesting configuration information. For 
example, the code may be placed in the vendor specific field 
of the booip packet. If a detected bootp packet does not 
contain s request for configuration information, the method 
returns to step 252 where the configuration tool continues to 
listen for bootp packets. 

11", however, the network device configuration too! 10 
determines at step 256 that the issuing device is requesting 
configuration information, for example, by matching a 
request code held by the network device configuration tool 
10 with a corresponding code contained in the detected 
Ijoolp packet, ihe method pa»cceds to step 258 where the 
network device configuration tool 10 will determine if the 
device requesting configuration information has a corre- 
sponding bootptab file 32 and if the description of the device 
requesting configuration information matches the device 
drawn on the network configuration map 106. 

In order to determine whether the device requesting 
configuration information has a corresponding bootptab file 
32 and if the description of the device matches the device 
drawn on the network configuration map, the attributes 
section 34 must be modified to include two additional 
portions — boolpid and subdeviceid. Hie bootpid portion 
contains a number unique to a particular device type and 
model number, lite subdeviceid identifies the type of 
devices installed in the device. For example, if the network 
device was a modular router having 4 PCI slots, each 
oonnecublc 10 ethcrnet, X.25, frame relay, IW and IDSN 
type entities, and an ethcrnet port connectable to an ethcrnet 
entity with a Thunder! .an board connectable to ethcrnet 
entities, .1 W- Adapter connectable to X.X5, frame relay and 
PPP entities and a Haste Kate ISDN Hoard connectable 10 
ISDN entities installed therein, the attributes section 34 
could be as set forth in the following code: 



:A!TKllSUI1iS 
ICON R<«.?rt;R.tCO 
NtmLVIlTY XcHnpai} RooKi** 
IMLSCRirnON* "Modular anJ l ast" 

connect -ret si or r "fthi-raer -x.:y 



-pa surra" 
cosxecr tcisuwr 
cosNticr -pa sixxr*'* 

"HtiK'rncI Pott" 



"PIM*" -ISDN" 
"t-thctTwi"* *X,S5" 

-PPP" "ISDN** 
-filhc-nct** *XJ5" 

-iTl**" -ISDN** 
-1'iKcmcf* ~X-C5~ 

-PPP- "ISIXV* 
"•Ethernet" 



"Vnmt Relay*" 
-Fi*mt Relay" 
"Frame Relay" 
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boolpid 10.* 

fciNicvicttil It "TbuasteilAa board" -lulmricf* 
MiWrntraJ I? -W-Adaitttr* "X.2S" '2. "Pramc Ktbv" 

•2 -ppp* *2 

vulxievtectf I.* -ttaiic Raw (SDN Heard" "ISDN" 
& Compaq Cteniputtr Cbqwtatioo 
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The guided configuration section would he similarly modi- 
lied to include an additional command script portion which, 
upon execution thereof, will Issue any additional requests 
listening, by the network device configuration tool 10 at step «5 for informat ion, for example, installed devices, necessary to 
252. for the presence of unconfigu red network devices 26 on construct the bootptab file described herein such that a 
the network. determination as to whether the description of the device 
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requesting configuration matches ihc device drawn on the 
network configuration map 106. 

Proceeding to step 260, if the device requesting configu- 
ration has a matching booiplab file, i.e., the bootpiab tile has 
a booipid which matches the serial number of a device 
having a bootpiab file ami if the devices installed in the 
device requesting configuration match the devices identified 
in the suhdeviccid portion of the configuration file for the 
matching bootpiab file, the network device configuration 
tool 10 issues a bootp reply at step 260. The bootp reply 
contains the filename which matches the configuration file 
described in the matching bootpiab file. Using die filename 
contained in the bootp reply, at step 262, the device request- 
ing configuration may issue a 'IVXV request for configura- 
tion information to the network device configuration tool 10 
which identifies the configuration file containing its con- 
figuration information. 

Continuing on to step 264, in response to the TKIV 
request containing the filename of a configuration file issued 
hy the device requesting configuration, the network device 
configuration tool 10 responds by issuing the requested 
configuration file to the device. At step 266, the unconfig- 
ured network device configures itself using the information 
contained in the configuration file transmitted thereto by the 
network device configuration tool 10 and. at step 268, the 
method ends. 

Returning to step 25*1. if the device requesting configu- 
ration does not have a matching rnxuptab file, the method 
proceeds to step 270 where the network device configuration 
tool 10 generates a pop-up requesting device GUI 300 which 
overlays a portion of tltc configuration manager GUI 100. A 
requesting device GUI 300 is illustrated in FIG. ,9. As 
illustrated herein, the requesting device GUI 300 includes an 
icon representing the unconfigured network device 302 
requesting a>nfiguration. 

Proceeding to step 272, the network administrator may 
select one of two options to configure the device requesting 
configuration. If the network administrator decides that the 
device 302 is a new device, the requesting device may be 
dropped onto the network workspace 102. thereby adding 
the requesting device to the network configuration map 106 
as an unconnected device. Proceeding on to step 274. the 
method would return to step 64 (FIG. 3H) wherein the 
previously discussed process of constructing a configuration 
file and uploading the configuration file to the unconfigured 
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network device may be completed to configure the device 
requesting con figuration. 

Returning to step 272 and, now proceeding to step 276, 
the network administrator may instead opt to drop the device 
5 302 requesting configuration onto an existing device, for 
example, muter 1 12, already included on the network con- 
figuration map 106. Hy dropping the device 302 requesting 
configuration onto an existing device on the network con- 
figuration map 106. the network. administrator is indicating 
to that the device 302 requesting configuration is the same 
device that is already on the network configuration map 106 
but, due to a difference between the description of the device 
302 in the bootptab and the description of the device 112 
contained in the corresponding configuration file, the net- 
is work device configuration tool 10 is unable to recognize lhat 
the two arc the same device. 

Proceeding on to step 278, the network device configu- 
ration tool 10 woukl reconcile the configuration file and the 
hootptab file for the device. If the two are irreconcilable, the 
3) method terminates at step 2K0. If the two can be reconciled, 
the configuration file is revised appropriately at step 2#2 and 
the method then returns to step 264 so thai the network 
device configuration tool 10 may issue the revised configu- 
ration file to the device 302 requesting configuration in the 
:5 manner previously described. To reconcile the device 302 
requesting configuration and an existing device such as the 
router 112. the network device configuration tool 10 reviews 
the devices insialled on the device requesting configuration 
match the devices installed. If the installed devices match, 
then the configuration file is modified using the contents of 
the bootpiab file, lite method then proceeds to step 264 so 
that the network device configuration tool 10 may issue the 
revised configuration file to the device 302 requesting con- 
figuration. 

35 thus, die re has been described and illustrated herein a 
configuration manager for network devices and an associ- 
ated method of providing configuration information to a 
network device. However, those skilled in the art will 
recognize that many modifications arid variations besides 

*0 those specifically men i toned may be made in the techniques 
described herein without departing substantially from the 
concept of the present invention. Accordingly, it should be 
clearly understood that the form of the invention described 
herein is exemplary only and is not intended as a limitation 
on the scope of the invention. 
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APPENDIX "A" 

File: 2514.DEV 

: ATTRIBUTES 
ICON ROUTER. ICO 
NETENTITY "Cisco 2514" 
DESCRIPTION "Cisco I0S" 

CONNECT "ETHERNETO" "Ethernet" 
CONNECT "ETHERNETl" "Ethernet" 

CONNECT "SERIALO" "X.25" "Frame Relay" "PPP" "HDLC" 
CONNECT "SERIALl" "X.25" "Prarae Relay" "PPP" "HDLC" 

:GUIDED_CONFIC 

use 2514vara.use 
frame 

asks t ring router name "What do you want to name thi3 
router?" minlen 2 maxlen 20 

cavofilenarae $routername "-confg" 
addconfig "hostname " Sroutername 

frane 

radio conf igip "Do you want to configure IP on this 
router?" "Yes" "No" 

if $configip = "Yes" then 
frame 

radio routeprot "What IP routing 
protocol do you want to use?" 
"RIP" "IGRP" 

addconfig " !" 

addconfig " i IP routing protocol to 

use" 

addconfig " I" 

addconfig "router " $routeprot 
addconfig " I" 

endif 
frane 

radio configipx "Do you want to configure IPX on 
this router?" "Yes" "No" 

if $configiplx * "Yes" then 

addconfig " !" 

addconfig " I Enable IPX routing" 
addconfig " !" 
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addconfig "ipx routing* 1 

addconfig " !" 

frame 

radio yesno **Do you want password 



protect conf iguration mode?** 
"Yes" "No" 



if $yesno « "Yes 14 then 

askpass enablepassword 



♦•Enter password for 

configuration mode" rainlen 5 maxlen 20 



endif 
frame 

addconfig " !■ 

addconfig "no ip domain -lookup** 
addconfig H !** 

: ETHERNETO 

frame 

assign portnamo "Ether netO" 
use 25i4eth.use 

; ETHERNET! 

frame 

assign portnamo "Ethernet!" 
use 2514eth.use 

;SERIAW> 

frame 

assign portname "SERIALO" 
use 2 51 4 wan. use 

; SERIAL! 

frame 

assign portname "SERIAL!* 
use 25l4wan.use 



addconfig H I " 

addconfig "enable 



password " ^password 



addconfig •» ! • 



endif 
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; BITMAP 

bitmap 25 14. bop 

locate "ETHERNETO" 56 69 8? 79 

locate "ETHERNETl" 110 69 141 79 

locate "SERIALO" 250 64 302 82 

locate "SERIALl" 326 64 377 82 

: BITMAP_jttENU 

; Ethernet 

menu "Something" 

menu item "Pick iae^ 

define string 80 

askstring string "Enter something" 
addconfig "you entered « Sstring 

menuend 
; Serial 0 

menu "No items available yet** 

;PR0MPTS 

"Password;" 

"-More-" 



File: 2S14vars.use 

# variables to use with the Cisco 2514 config scripts 



(2514*. 


*) 




define 


conf igip 


3 


define 


configipx 


3 


define 


routeprot 




define 


password 


30 


define 


enahlepas sword 


30 


define 


ipaddress 


IS 


define 


i pmask 


15 


define 


ipxaddress 


20 


define 


ipxencap 


15 


define 


lpsz 


80 


define 


portname 


10 


define 


yesno 


3 


define 


frconnector 


10 
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define frdici 3 

define frcir 4 

define freir 4 

define frportspeed 4 

define pppntu 5 

define pppauth 4 

define pppcoaprcss 10 

define ppplapb 3 

define ppptacacs 3 

define pppconnector 5 

define routornarae 30 



Pile: 2514eth.use 

assign lpsz "Do you want to configure " $portnane 

«?« 

radio yesno $lpsz "Yes" "No" 
if $yesno « "Yes" then 

addconfig " !" $sportname "configuration 

commands" 



addconfig " !" 

addconfig "interface " $portnane 
addconfig " !" 

if $cpnf igip ^ "Yes" then 

frame 

getip ipaddress ipraask 

askip ipaddress ipraask "Enter IP network 



that interface is plugged 
into" 



5 ipraask 



addconfig " I " 

addconfig " ! IP related commands" 
addconfig ■ !■ 

addconfig "ip address " $ipaddress M 



u 



addconfig ■ !" 

assignip $ ipaddress $ipmask 



endif 



if $configipx .« "Yes" then 
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franc 

getipx ipxaddress 

askstring ipxaddress "Enter IPX network 
number for this interface" 
hex max 1 en S 

frame 

radio ipxencap "What type of IPX 
e the met encapsulation should be 
used? « "ARPA" "Novell -Ether " " SAP" " SNAP" 
addconfig " 

addconf ig " i IPX related commands" 
addconfig " !" 

addconfig "ipx network " $ ipxaddress 
addconfig "ipx encap " $ ipxencap 
addconfig " I" 
assignipx $ ipxaddress 

end if 

end if 

File: 2514wnn.use 

assign lpsz w Do you want to configure " $portnane 

radio yesno $lps2 "Yes" "No" 
if $yesno » "Yes" then 
addconfig " !■ 

addconfig " l " $portname " configuration 

commands" 

addconfig "interface " $portnaite 
addconfig " !■' 

if $configip » "Yes" then 

frame 

assign lpsz "Enter IP address for " $portname 
askip ipaddress ipmask $lpsz 
addconfig "!" 

addconfig "I IP related commands" 
addconfig *»1" 

addconfig "ip address " $ipaddress ■ " $ipmask 

endif 

if $configipx * "Yes" then 
frame 
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assign lpsz "Enter IPX network number for » 

$portnane 

askstring ipxaddress $lps2 hex maxlen 8 
addconfig " !" 

addconf ig n 2 IPX related commands" 
addconfig " 1" 

addconf ig "novel 1 address " $ ipxaddress 
addconfig " i" 

endif 

if $connected » "Frame Relay" then 
frame 

assign lpsz "would you like to configure Frame 
Relay for " 
$ port name "?" 

assign yesno "Yes" 

radio yesno Slpsz "Yes" "No" 

if $yesno - "Yes" then 

addconfig " !" 

radio yesno $lps2 "Yes" "No" 
if $yesno = "Yes" then 

addconfig " i" 

addconfig " ! Set Encapsulation to 

Frame Relay" 

addconfig "encapsulation frame- relay" 

# radio frconnector "What connector 

type are you using?" "RS-232" "V«35" 

askstring frdlci "what is your local 

DLCI" HIN 16 HAX 996 

# set DLCI command 

assign lpsz "What is n $ port name 
"Physical Port Line Speed (Kbps)" 

askstring frportspeed $lpsz HIN 1.2 

MAX 2048 

/ set port speed command 

assign lpsz "What is the Committed 

Information Rate (CIR) 

for " $portname "?" 

askstring frcir $lpsz MIN 1.2 MAX 

2048 

# set CIR command 
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assign Ipsz "What is the Excess 
Information Rate (EIR) for * 
Sportname ■?" 

askstring freir $lpS2 MIN 1.2 MAX 

2040 

t formula goes here 
# set EIR command 

radio yesno "Do you want to use 

compression?" "Yes" "No" 

§ if goes here 

§ set compression command 

# OTHER PARAMETERS to set (some under advanced button) 

Ifrport speed 

ffrcir 

ffrier 

it rremnane 

#f rconnrtr 

#frcorapress 

Ifrnettype 

#f rmax frame 

#frcongmonper 

ffraeasint 

/frlit 

ffrpvt 

Ifrfsef 

/fret 

jjffrcet 

It rclocking 

iff renu late 

ffremulate 

ffrlinestate 

#map 

display "<more frame relay questions 
would normally follow>" 
end if 

else 

if $connected = "PPP" then 
frame 

assign lpsz "Would you like to configure 
PPP for " Sportname "?" 

assign yesno "Yes" 

radio yesno $lpsz "Yes" "No" 

if $ycsno » "Yes" then 

$ Set defaults 
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Assign ppmtu °1500" 
assign pppauth "CHAP" 
assign pppcompress "Stacker" 
assign ppplapb "No" 
assign ppptacacs "No" 

addconfig " !" 

addconfig " ! Set Encapsulation to 

PPP" 

addconfig "encapsulation ppp" 

# radio pppconnector "What connector type 

are you using?" "RS-232" 

"V.35" 

frame 

radio pppauth "what authentication 
protocol are you using?" 
"PAP" "CHAP" "Off" 

if $pppauth <> "Off" then 
addconfig " !" 

addconfig " I PPP Authorization 

related 
commands" 

addconfig " !" 

addconfig "no ppp 

authentication" 

endif 

end if 
frame 

radio pppcompress "What compression method 

are you using?" 
"Predictor" "Stacker" "off" 

if $ pppcompress <> "Off" then 
addconfig " !" 

addconfig ■" ! PPP Compression related 

commands" 

addconfig " !" 

addconfig "ppp compress ° 

$pppcorapress 

else 

if $ pppcompress «= "Off" then 
addconfig ■ !" 

addconfig " i PPP Compression 

related commands" 
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addconfig " !" 

addconfig n no ppp compress ion" 

endif 

end i f 
frame 

radio ppplapb "Use LAPB with PPP for 
reliable link?" "Yes" 
"No" 

if $ppplapb = "Yes" then 
addconfig ? J* 

addconfig " I PPP LAPB with PPP for 
reliable link related commands" 

addconfig w !" 

addconfig "ppp reliable-link* 

else 

addconfig " !" 

addconfig " i PPP LAPB with PPP for 

reliable link 
related commands " 

addconfig " !" 

addconfig "no ppp reliable- link" 

end if 
frame 

radio ppptacacs "Use TACACS to verify PPP 
authentication?" 
"Yes" "No" 

it Sppptacacs - "Yes" then 
addconfig " i 

addconfig " 1 Use TACACS to verify 

PPP authentication 

addconfig "ppp use-tacacs* 

else 

addconfig " J" 

addconfig ° ! Use TACACS to verify 

PPP authentication" 

addconfig * l» 

addconfig "no ppp use-tacacs" 

end if 

frame 

assign lpsz "What is the Maximum 
Transmission Unit for " 
Sportname "?• 
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askstring pppntu $lpsz MIN 64 MAX 



4096 



addconfig " ! 
addconfig 1 



ii 



Set 



Max i ouo 



Transmission Unit" 

addconfig "mtu n Spppratu 
addconfig "ip mtu " $pppmtu 

end if 



display $portnaroe " is connected to a " 
$connec ted ■ network" 

display "appropriate guided configuration 
commands would appear here" 
endif 

endif 

°1995 Compaq Computer Corporation 
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What is claimed is: 

I. For a computer system having a processor subsystem 
awl a memory subsystem coupled by a system bus for 
bi-directional exchanges therebetween, a configuration man- 
ager for configuring a network device remotely coupled 5 
thereto, said configuration manager comprising: 
at least one configuration script stored in said memory 
subsystem, said configuration script containing a scries 
of executable instructions for constructing a configu- 
ration lite and a bootptab file for a first specified type 
network device, said configuration script including at 
least a first section containing a series of configuration 
commands which generate requests for information, 
ami a. second section containing a set of connection 
rules for connecting said first specified type of network 
device to at least one other specified type of network 
deyice, and where said second section of said configu- 
ration script includes at least (i) an : identifier for each 
connection interface of said first specified type of 
network device and (ii) a list of network device types 
that can be connected to the connection interface asso- 
ciated therewith, said list being provided for each of 
Said klentifiers; 
a first software module, executable by said processor 
subsystem, for constructing a configuration file suitable 
for upload ip a network device of said first specified 
type and a bootptab tile suitable Tor identifying said 
network device, said first soft ware module constructing 
said configuration file and said bootptab file by execut- 
ing said series of executable instructions contained in 
said configuration script; and 
a second software module, executable by said processor 
subsystem, for processing a conltgu ration request 
issued by said network device by identifying said 
network device using said constructed bootptab file and 
configuring said network device by uploading said 
constructed configuration file thereto, 
•2. A configuration manager for configuring a network 
device remotely coupled thereto according to claim I 
wherein information received by said first software module 
in response to said requests for information is used to 
construct sitid configuratkm file and said bootptab file. 

3. A configuration manager for configuring a network 
device remotely coupled thereto according 10 claim 1 and 
wherein said second section of said configuration script 
further comprises: 

a first portion which uniquely klcntilics said network 
device; and 

a second portion which identifies devices installed in said 
network device. 

4. A configuration manager for configuring a network 
device remotely coupled thereto according to claim 3 and 
wherein said first section of said configuration script furl Iter 
comprises: 

a first portion corresponding to each of said at least one 55 
other specified type of network device specified in saitl 
connection rules contained in said second section of 
said configuration script; 

said first portion containing a subset of said series of 
configuration commands which are executed only if $j 
said network device for which said configuration file is 
being constructed is connected to a network device of 
said other sjjecified type of network device. 

5. A com|xiter-implemented method for configuring a 
remotely located network device, comprising the steps of: 55 

providing a configuration script containing a series of 
executable instructions for constructing a configuration 
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file for a first specified type of network device, said 
configuration script including a first section containing 
a series of configuration commands and a second 
section containing a set of connection rules for con- 
necting said first specified type of network device to at 
least one other specified type of network device, and 
where said second section of said configuration script 
includes at least (i) an identifier for each connection 
interface of said first specified type of network device 
and (ii) a list of network device types that can be 
connected to the connection interface associated 
therewith, said list being provided for each of said 
identifiers; 

constructing a configuration file by executing said series 
of instructions contained in said configuration script; 
detecting a request for configuration issued by a' network 
device; 

determining if said configuration (tic corresponds to said 
network device issuing said request for configuration; 
if said configuration file corresponds to said network 
device, issuing a reply to said request tor configuration 
that identifies said configuration file to said network 
device; and 

issuing said configuration file to said network device in 
response to a request for configuration file which 
identifies .said configuration file. 

6. A computer-implemented method for wmfiguring a 
remotely located network device according to claim 5 and 
further comprising the steps of; 

generating requests for information by executing said 
series of configuration commands com ained in said first 
section of said configuration script; and 
constructing said configuration file using information 
received in response to said requests for information. 

7. A computer-implemented method for configuring a 
remotely located network device according to claim 6 and 
further comprising the steps of; 

constructing a bootptab file which contains a unique 
identifier ami said configuration file for said network 
device. 

8. A compute r-impl cm ented method for configuring a 
remotely located network device according to claim 7 
wherein, the step of determining if said configuration file 
corresponds to said network device issuing said request for 
conliguration further comprises the steps of: 

determining if said network device issuing said request 
for configu ration has an identification code which 
matches an identification code contained in said 
bootptab file; and 
determining if devices installed in said network device 
issu ihg said request for co nfigu ration ma tehes i nstal led 
devices identified in said bootptab file. 

9. A computer-implemented method for configuring a 
remotely located network device according to claim 5 
wherein the step of providing a configuration script contain- 
ing a series of executable instructions further comprises the 
step of: 

providing a configuration script which includes, within 
said second section, a first, portion corresponding to 
each of said at least one other specified type of network 
device specified in said connection rules contained in 
said second section of said configuration script; 
each said first portion containing a subset of said series of 
configuration commands. 

10. A computer-implemented method for configuring a 
remotely located network device according to claim 9 and 
further comprising the step of: 
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executing said subset of said series of configuration 
commands contained in each said first portion only if 
said network device for which said configuration file is 
being constructed is connected to a network device of 
said other specified type of network device. 
U. For a computer system having a processor subsystem 
and a memory subsystem coupled by a system bus for 
bidirectional exchanges therebetween, an apparatus for con- 
structing configuration files for network devices, compris- 
ing: 

a plurality of configuration scripts for various different 
types of network devices, said configuration scripts 
being stored in said memory subsystem, and each of the 
configuration scripts being used to construct a configu- 
ration file and a bootpiab tile, t he bootptab files being 
constructed arc used to assist with remote conligu ration 
of network devices including at least one connection 
statement for each connection port of the associated 
one of the network devices, the connection statements 
included in said configuration scripts comprise connec- 
tion ru les that specify permissible con nectioas between 
the ports of the various different types of network 
devices and other of the network devices, the connec- 
tion rules include an identifier for the associated port 
and a list of network devices that are permitted to 
connect to the associated port; 

first computer program code for enabling selection of a 
particular one oft he various different types of network 
devices; and 

second computer program code for executing the one of 
said configuration scripts associated with the particular 
one of the various different; types of network devices to 
produce a configuration file and a bootptab file for the 
particular one of the various different types of network 
devices. 

12 An apparatus lor constructing a configuration files for 
network devices according to claim 11, wherein the con- 
figuration scripts includes at least one connection statement 
for each connection port of the associated one of the network 
devices, and a series of commands, the series of commands 
associated with a particular one of said configuration scripts 
are executed by said second computer program when said 
second computer program code executes the particular one 
of said configuration scripts. 

13. An apparatus for constructing a configuration files lor 
network devices according to claim 12, wherein said appa- 
ratus further comprises: 

third computer program code for uploading said configu- 
ration file to a network device of the particular one of 
the various different types of network devices. 

14. An apparatus for constructing a configuration files for 
network devices according to claim 12, wherein the execut- 
ing of the one of said configuration scripts by said second 
computer program code prompts a user of said apparatus to 
enter information, and the entered information is used by 
said second computer program code in producing the con- 
figuration file. 

15. For a computer system having a processor subsystem 
and a memory subsystem coupled by a system bus for 
bidirectional exchanges therebetween, an apparatus for con- 
structing configuration files for network devices, compris- 
ing: 

a plurality of configuration scripts for various different 
types of network devices, said configuration scripts 
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being stored in said memory subsystem, and each of the 
configuration scripts being used to construct a configu- 
ration file and a bootpiab file, the bootpiab files being 
constructed are used to assist with remote configuration 
of network devices including at least one connection 
statement tor each connection port of the associated 
one of the network devices; 
first computer program code for enabling selection of a 
particular one of the various diflerenl types of network 
devices; 

second computer program code for executing the one of 
said configuration scripts associated with the particular 
one of the various different types of network devices to 
produce a configuration file and a bootptab file for the 
particular one of the various diflcrcnt types of network 
devices; 

third computer program code for detecting a request for 
configuration issued by a connecting network device; 

fourth computer program code for determining if a con- 
figuration file already exists for the network device 
based on the bootptab file associated with the connect- 
ing network device issuing the request lor configura- 
tion; and 

fifth computer program code for issuing a reply to the 
request for configuration that identifies the appropriate 
configuration file for the network device when said 
fourth computer program code determines that the 
configuration file already exists for the connecting 
network device; and 

sixth computer program code for directing execution of at 
least a portion of said second computer code to produce 
a configuration file and then issuing the produced 
configuration file to the connecting network device 
when said fourth computer program code determines 
that the configuration file does not exist for the con- 
necting network device. 

16. An apparatus for constructing a configuration files for 
network devices according to claim 15, wherein the con- 
figuration scripts includes at least one connection statement 
for each connection port of the associated one of the network 
devices. 

17. An apparatus for constructing a configuration files for 
network devices according to claim 16, wherein each of the 
configuration scripts further includes a series of commands, 
and 

wherein the series of commands associated with a par- 
ticular one of said configuration scripts are executed by 
said second computer program when said second com- 
puter program code executes the particular one of said 
configuration scripts. 

18. An apparatus for constructing a configuration files for 
network devices according to claim 17, 

wherein dialog screens for the user to input information 
are produced when said second computer program code 
executes the one of said configuration scripts associated 
with the particular one of the various different types of 
network devices, and the dialog screens prompt the 
user to enter the input information, and the input 
information that the user enters is used by said second 
computer program in producing the configuration file. 
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ABSTRACT 



This invention penaias a system and method for intercon- 
necting processing module within a computer device and ihe 
input/output channels external to the computer devices.. 
More specifically, die Multi-Service Optical InfiniBand 
Router (01 R) relates to the use of a device to communicate 
with InfiniBand devices, IP-based switching devices. IP- 
based routing devices, SONET Add- Drop Multiplexing 
devices, DWDM (Dense Wavelength Division Multiplex- 
ing) devices, Fibre Channel devices, and SCSI devices. 



InfiniBand System Architecture 



Sprrific. I/O 




VI o 



Patent Application Publication Nov. 7, 2002 Sheet I of 26 US 2002/0165978 Al 




Patent Application Publication Nov. 7, 2002 Sheet 2 of 26 US 2002/0165978 At 




Patent Application Publication Nov. 7, 2002 Sheet 3 of 26 US 2002/0165978 Al 




Patent Application Publication 



Nov. 7, 2002 Sheet 4 of 26 



US 2002/0165978 Al 



LED 



Switching Fabric Card (Active) 



LED 



Switching Fabric Card (Standby) 



□□□□□□□□ DO 
Optical O" Q 



Fibre Channel 
Card 



DaDDDDODQD 
Optical 0 0 0 00 0 0 0 0 0 



Fibre Channel 
Card 



Etherdhanncl 
-€a*d 



rm 1 1 1 1 1 1 1 1 o 
Opticail™ Q-D cm o 



rm rm 
Optical™ ™ 



rm d 
ana 



EtherChanncI 
Card 



Optical 



a □ 
□ □ 



10 Gigabit 
Ethernet Cur J 



§§ 


Optical 


o o 
o o 




SONfcTCard 


ooo 


Optical 


O D □ □ 

o o □ o 


OC48 SONET 




LOU 
000 


Optical 


O D q D 
DO □ O 


OC48SONET 
— Cawl^w 


§§ 


□ ODD 
Optical DODO 


DWDM Interface 

, ^, , 


§§ 


□ ODD 
Optical □ O □ □ 


DWDM Interface 
Card 




□ ODD 
Optical DODO 


InfiniBand* Cards 




aooo 

Optical □ O O O 


InfiniBand* Cards 



g Serial Q Q 10/1001 



Management 
Card (Standby)) 



g Serial [] QlO/1001 



Management 
Card (Active)) 



VA 



Patent Application Publication Nov. 7, 2002 Sheet 5 of 26 US 20O2/OI65978 A1 



. 3 
O 
>, 

J 

S 
<w 
>-» 

*> 

i 



o 

u 
p 

OX) 




iMHb KFf - IN 



Patent Application Publication Nov. 7, 2002 Sheet 6 of 26 US 2002/0165978 Al 




Patent Application Publication Nov. 7, 2002 Sheet 7 of 26 US 2002/0165978 At 




1*1 



Patent Application Publication Nov. 7, 2002 Sheet 8 of 26 US 2002/0165978 AJ 



e 



CO 



Z 



z: 



4 



i 



o 

s 



13 



z 



o 

5 



3 



Z! 



« 5 w 

III 



3VW 



DVIV 



*4 



DVJV 



Z: 



I 81 

* < O 



Z 



M 3 



3 

3tE 



5- 



3 



1' 
#2 



Patent Application Publication Nov. 7, 2002 Sheet 9 of 26 



US 2002/0165978 Al 




« 


j XJ 




w 
8 

B 


1 


E 


0 


o. 
O 




a 


It 


It 



1 



-4- 



2 



«s s "3 

111 

*c < o 



h4— 



i 



O 



■a u 

li 



c — 

15 



I 8» 



^71 



Patent Application Publication Nov. 7, 2002 Sheet 10 of 26 US 2002/0165978 Al 




3oo 



Patent Application Publication Nov. 7, 2002 Sheet 11 of 26 US 2002/0165978 Al 



CO 

CO 



go u 
CD 

J: ~ 

I 



2 

OX) 



5 8 



1 



a' 



5 to 



/ 5 



| 5 



ii 

E C 

3* 



1 1 
i 2 



I il 



,5 ^ 
4 Q 



r- 



\lT 



m 



DV1V 



DVIV 



a 

e 

dsn 



o 



3VW 



DVIV 



^3 



"53 « 

1 « 



o 



life 



3 



£-3 



^ I 35 
s 5 i 

^5 



v. 



3o/ 



Patent Application Publication Nov. 7, 2002 Sheet 12 of 26 US 2002/0165978 Al 



.3 



00 



I 

Q 

1— < 

is 

8 S 
eg g 

! 
I 

I 

60 



X 

r 



"O Oil <-. 

/ 5 /I/!, 




30Z 



Patent Application Publication 



Nov. 7, 2002 Sheet 13 of 26 US 2002/0165978 Al 




3o3 



Patent Application Publication 



Nov. 7, 2002 Sheet 14 



US 2002/0165978 A1 



.CO: 

o 



1-4 



1 



o 

I 

o 



.1 

o 



g 

to 

•.FN 



o 
© 

£ 



e 

o 
U 



C5 



t 



?0t 



Patent Application Publication Nov. 7, 2002 Sheet 15 of 26 US 2002/0165978 Al 




Patent Application Publication Nov. 7, 2002 Sheet 16 of 26 US 2002/0165978 Al 




306 



Patent Application Publication Nov. 7, 2002 Sheet 17 of 26 US 2002/0165978 AI 




3o7 



Patent Application Publication Nov. 7, 2002 Sheet 18 of 26 US 2002/0165978 Al 




Patent Application Publication Nov. 7, 2002 Sheet 19 of 26 US 2002/0165978 Al 




Patent Application Publication Nov. 7, 2002 Sheet 20 of 26 US 2002/0165978 A1 




3/0 



Patent Application Publication Nov. 7, 2002 Sheet 21 of 26 US 2002/0165978 Al 




n 



Patent Application Publication Nov. 7, 2002 Sheet 22 of 26 US 2002/0165978 Al 




3/Z- 




313 



Patent Application Publication Nov. 7, 2002 Sheet 24 of 26 US 2002/0165978 Al 




fa 



3/4 



Patent Application Publication 



Nov. 7, 2002 Sheet 25 of 26 US 2002/0165978 Al 




Patent Application Publication Nov. 7, 2002 Sheet 26 of 26 US 2002/0165978 A 1 



5 

.8 5 



u 

§ 

{/J 
w 

o 



z 



o 
o 



Q 

Z 
< 



Q 
Q 



0! w 



p 




5/6 



US 2002/OJ 65978 A I 



Nov. 7 ? 2(X)2 



MULT1-SKRVICK OPTICA!. INFINIBAND ROUTER 

RULATED APPLICATION 

[0001] This application claims the benefit of U.S. Provi- 
sional Pat. App. Scr. No. 607289.274. fifed on May 7. 2001. 
I*he entire teachings of the above application are incorpo- 
rated herein by reference. 

BACKGROUND 

[0002] i. weld of nit invention 

[0003] Th is invention pertains to a system and rocthwl for 
interconnecting computer devices* networking devices in the 
local area network, metro area network; wide-area network 
ami system area network using a plurality of computer 
networking interfaces, 

BACKGROUND 

[0004] 2. DESCRIPTION OF PRIOR ART 

[0005] FIG . 1 illustrates the Traditional S yste m Architec- 
ture. The traditional server contains the processing mtxiulcs 
11, the I/O modules 12, and the other interface adapters 13. 
ITie I/O is usually based on the SCSI bus or Fibre Channel. 
11»e I lost usually "owns*' the storage 15, which is enclosed 
with the server enclosure 14. The backup traffic needs to go 
through the LAN to the server (before getting to another 
storage device). It has limited scalability (16 devices per 
bus). 

[0006] FIG. 2 illustrates the InfiniBand System Architec- 
ture. When all the major servers joined force to define an 
Infinite Hand width I/O bus. they call it InfiniBand. The idea 
of the ImluiHand architecture is to decouple the Pn>ccssing 
Module called the Server Host 22, and the I/O Module, 
ealled the target 23. The- 1 losls and the Targets arc connected 
through an external switch, called the InfiniBand Switch 22. 
This switch can be used to connect to multiple InfiniBand 
nodes, including IB host, IB target, and other IB switches. 
The architecture is extremely scalable. 

[0007] The InfiniBand is good technology if the user does 
not have to connect to other nodes outside of the InfiniBand 
System Area Network. The InfiniBand technology Ims some 
limitations; the connection between InfiniBand nodes has to 
be within 100 meters. In addition, there is no specification 
for connecting to a network beyond ihe LAN. For example, 
there is no interoperability definition for InfiniBand to 
connect to a SONET network. This is what this invention 
will be doing. Our goal is to remove these kinds of barriers 
and evolve InfiniBand to become the complete System Area 
Network solution to Ihe Application Service Providers, the 
Storage Service Providers, and the large enterprises, 

[0008] FIG. 3 illustrates the Optical InfiniBand (IB) 
Architecture when the Optical InfiniBand Router Ol R sys- 
tem 31 is used. With this invention, the Optical InfiniBand 
Router 32, the IB host 31 can connect to any IB target 34. 
35 without any restrictions. The nodes can be thousands of 
miles away but the nodes will behave like they are connected 
through a standard I/O bus. ITiis is the power of our 
invention and that is why this product is so valuable to target 
customers. 

[0009] In addition to transporting InfiniBand data across 
Ijocal Area Network (LAN). Metro Area Network (MAN), 



and Wide Area Network (WAN), it will transport storage 
system related data across the LAN. MAN and WAN. In 
prior art, SCSI and Fiber Channel technologies are being 
used for the Storage Area Network (SAN) transport. This 
invention will also transport any SAN -based frames, includ- 
ing SCSI and Fibre Channel, acn>ss ihe different networking 
environment. 

[0010] InfiniBand structure and functions are descruVd in 
the literature and is therefore not described in detail here. 
Among the relevant reference texts are "InfiniBand Archi- 
tecture Specification, Release 1.0" (ref. I) and "InfiniBand 
Technology Prototypes White Paper" (ref. 15). 

[00 1 1 ] Fib re Channe I struetu re a ml functions a re descrilied 
in the literature and is therefore not described in detail here. 
Among the relevant reference texts are " Hie Fibre Channel 
Consultant -A Comprehensive Introduction'* (ref, 7) and 
"Fibre Channcl-The Basic* 7 * (ref. 8). 

[001 2] Small Computer System Interface (SCSI) structure 
and functions are described in the literature and is therefore 
not described in detail here. Among the relevant reference 
texts are U *J Tie Book of SCSI: I/O Tor the New Millennium** 
(ref. 17) and "Making SCSI Work*' (Ref. IS). 

[(Ml 1 3] Gigabit Ethernet structure and functions are 
described in Ihe literature and is therefore not described in 
detail here. Among the relevant reference texts arc "Media 
Access Control (MAC) Parameters, Physical Layer, 
Repealer and Management Parameters for 1000 Mb/s 
Operation/' (Ref. 9), and "Gigabit Ethernet -Migrating to 
High-Bandwidth LANS'* (ref. 8). 

[00 1 4] SO N ET st mctu re a nd fu net ions a re described in t he 
literature and is therefore not described in detail here. 

[0015] Among the relevant reference texts are ''American 
National Standard for 'relcc<)mmunic.'ilu.ms-S\iichro»ius 
Optical Network (SONET) Payload Mappings." (ref. 5) and 
•'Network Node Interface for the Synchronous Digital hier- 
archy (SOU) ." (ref. 6). 

[0016] Dense Wavelength Division Multiplexing 
(DWDM) technology is described in the literature and is 
therefore not described in detail here. Among the relevant 
reference texts are "Web Pro I 'brum tutorial: DWDM", (ref. 
13) and ''Fault Detectability in DWDM Systems: Ttward 
Higher Signal Quality <K Reliability** (ref. 16). 

[00 1 7] Optical technology and Internet Protocol (IP) tech- 
nologies are described in the literature and are therefore not 
described in detail here. Among the relevant reference texts 
arc -The IV) int -to- Point Protocol (PPP) V (ref. 2), "PHP in 
HDLC-like Framing" (ref. 3), "PPP over SONlsl'/SDI r 
(ref, 4), "Optical Communication Networks Multi-Protocol 
lambda Switching: Combining MPLS Traffic Engineering 
Contml With Optical Cross-Connects, (ref. I I). "Features 
and Requirements for The Optica I Lavcr Control Plane** (ref. 
12). 

[0018] In conclusion, insofar as I am aware, no Optical 
routers or Storage Area System switches formerly developed 
provides the multi-services interconnection functions with 
InfiniBand technology. In addition, insofar as I am aware, no 
networking systems formerly dew loped provides the gale- 
way function between the InfiniBand devices ami the Stor- 
age Area Systems devices or Network Attached Storage 
devices. 
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SUMMARY OF THE INVEN110N 

[0019] Objects and Advantages (owr the Prior Art) 

[0020] Accordingly, besides t he objects and adva nl ages of 
supporting multiple networking/system services dcscr&cd 
in my above pate ni v several objects and advantages of the 
present invention are: 

[0021] To provide a system which can extend the 
transport of InfiniBand from the 100-melers limited 
to beyond 100 K meters 

[0022] To provide a system which can transport 
InfiniBand data through Gigabit Ethernet interface 
between the InfiniBand host or target channel 
devices. 

[0023] 'lb provide a system which can transport 
InfiniBand data through SONET Add-Drop Mul- 
tiplexer interface between the InfiniBand host or 
target channel devices. 

[0024] To provide a system which can transport 
InfiniBand data through DWDM interface 
between Che InfiniBand host or target channel 
devices. 

[0025] To provide a system which can provide a 
gateway function, which can convert InfimlJand 
data stream to/from Fibre .Channel data stream. 

[0026] To provide a system which can provide a 
gateway function, which can transport I aft ni Band 
data stream to/from Network Attached Storage 
Tiler devices. 

[0027] To provide a system which can provide 
Quality of Service control over the InfiniBand data 
stream through ihe OIR network. 'Hie OIR net- 
work can be comprised of Gigabit Ethernet inter- 
face, SONET interfaces, Fibre Channel interfaces 
and DWDM interfaces. 

[0028] Further objects and advantages are to provide a 
highly reliable, highly available, and highly scalable system, 
which can be upgradcable to different transport services, 
including Gigabit Ethernet, SONET, and DWDM. The sys- 
tem is simple lo use and inexpensive to manufacture com- 
pare lo the current Gigabit lit he met based IP routers, 
SONET Add- Drop Multiplexers, and DWDM devices. Still 
further objects and advantages will become apparent from a 
consideration of the ensuing description and drawings. 

Objects (Benefits) to our Customers 

[0029] This invention provides our customers with the 
needed performance and the Ixmcfits as follows: 

[0030] Simplification 

[0031] This invention combines the capability of the 
InfiniBand, Gigabit Ethernet, SONET, and DWDM into one 
power router. By providing the multi-services, lite customers 
can easily upgrade and modify the system/network infra- 
structure without major installation delay or training require- 
ments. 

[0032] Providers can grcatlv simplify service delivery by 
bringing InfiniBand. Gigabit* Ethernet, SONET. DWDM 



service directly lo every midsize to large enterprise and 
major application service provider (ASP)/ Web hosting cen- 
ter. 

[0033] Reliability 

[0034] The OIR provides redundant hardware platform 
and traffic paths. By using SON Iff Automatic Protection 
Systems or DWDM optical redundant path protection meth- 
ods, the OIR network is guaranteed to recover from any 
line/path or hardware failure within 50 milliseconds. Hie 
fast failure recovery capability is the key advantage mat OIK 
has over the existing Ethernet based networks. 

[0035] Qual ity of Service (QoS) support 

[0096] The customers can configure the user traffic based 
on their needs. Policy-based Network Management provided 
with die 01 U can manage traffic lo each user connection 
(micro-flows). T*hc OIR supports policies to define deter- 
ministic, guaranteed, assured, and shared traffic. 

[0037] Scalable Performance 

[003K] The OIR can be scaled up using interchangeable 
line cards. To complement the existing infrastructure, die 
'LAN&AN/NAS services can be connected to ihe OIR. 
Multi-service trafttc can be aggregated into high speed 
Gigabit Ethernet (3 Gbps to 10 Gbps). SONET (2.5 Gbps lo 
10 Gbps), or multiple wavelength DWDM (up a multitude 
.of gigabits per second) systems. 

BRIEF DESCRIPTION OF THE DRAWINGS 

[0039] FIG. 1. . is a block diagram illustra I ing a traditions I 
server system architecture. 

[0040] FIG. 2. is a block diagram illustrating the Infini- 
Band Architect tire. 

[0041] FIG. 3. is a block diagram illustrating the Optical 
InfiniBand Routing (OIR) system. 

[0042] FIG. 4. Is a block diagram illustrating an OIR 
sample system layout. 

[0043] FIG. 5; is a block diagram illustrating the OIR 
Logical Multi-Services System layout. 

[0044] FIG. 6. is a bkick diagram illustrating a method for 
internetworking: System Area Network (SAN) switching 
using OIR technology. 

[0045] FIG. 7. is a block diagram illustrating a method for 
InfiniBand Packet switching through the OIR system. 

[0046] FIG. 8. is a block diagram illustrating a method for 
Inter-OIR infmiBand Packet switching using Gigabit Eth- 
ernet Interfaces. 

[0047] FIG. 9. is a bkuk diagram illustrating a method for 
Intcr-OIR InfiniBand Backet switching using SONET Inter-, 
faces. 

[0048] FIG. 10. is a block diagram illustrating a method 
for Intcr-OIR InfiniBand Backet switching using DWDM 
Interfaces. 

[0049] FIG. 11. is a block diagram illustrating a method 
for Intcr-OIR l-tbre Channel Data switching using DWDM 
Interfaces. 
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[0050] FIG. 12. is a block diagram illustrating a melhod 
for Inter-OIR InfiniBanuVFibrc Channel Data switching 
using DWDM Interfaces. 

[0051] FIG. 13. Is a Mock diagram illustrating a method 
for Inter-OIR Inttni (Inncl/tSCSI Daia switching using 
DWDM Interfaces. 

[0052] FIG. 14. is a block diagram illustrating Packet 
Format for the OIK system. 

[0053] FIG. IS. is a block diagram illustrating the Infini- 
Band Frame encapsulated within the OIR Packet. 

[0054] FIG. 16. is a block diagram illustrating the Fibre 
Channel Frame encapsulated within the OIK Packet. 

f 0055} FIG. 17. is a block diagram illustrating the Ether- 
net Frame encapsulated within the OIK Packet. 

[0056] FIG. 1 8. is a block diagram illustrating the tSCSl 
Frame encapsulated within the OIK Packet. 

[0057] FIG. 19. is a block diagram illustrating the Infini- 
Band Ingress Processing 

[0058] FIG 20; is a block diagram illustrating the Infini- 
Band Egress Processing 

[0059] FIG 2 1 . is a block diagram illustrating the Gigabit 
Ethernet Ingress I*roccssing 

[0060] FIG 22. is a block diagram illustrating the Gigabit 
Ethernet Egress Processing 

[0061] FIG 23. is a block diagram illustrating the Fibre 
Channel Ingress Processing 

[0062] FIG 24. is a block diagram illustrating the Fibre 
Channel Egress Pr<tcessing 

[0063] FIG 25. is a bkick diagram illustrating the Generic 
Ingress Processing for 0048 SONET interface, OC-192 
SONET interface, DWDM interface, and 10-Gigabit Ether- 
net interface. 

[0064] FIG 26. is a bh>ck diagram illustrating the Generic 
Egress Processing for OC-48 SONET interface. OC-192 
SONET interface. 

Reference Numerals In Drawings 

[0065] 11 Processing Module 

[0066] 12 PCI Bus Interface 

[0067] 13 Input/Output Controller 

[0068] 14 Traditional Server (Enclosure) 

[0069] 15 MuItiMcdia Device 

[0070] 1 6 I jocal Area Network 

[0071] 17 Storage (Disks, Tapes, Flash Memory) 

[0072] 18 Graphics Device 

[0073] 21 InfiniBand Server Host 

[0074] 22 InfiniBand Switch 

[0075] 23 InfiniBand Target Channel Adapter 

[0076] 31 Optical InfiniBand Router (OIK System) 

[0077] 31a Originating OIK System (same as 31-OIR 
system with InfiniBand interface support) 



[0078] 3 1 b Intermediate OIK System (same as 
3 1 -OIK system with Gigabit Ethernet interface sup- 
port) 

[0079] 31c Originating Ol K System (same as 3 1 -OIK 
system with SONET interface support) 

[0080] 3W Destined OIK System (same as 31-OlK 
system with DWDM interface support) 

[0081] 32 2 Fiber/4 Fiber SONET/DWDM King Net- 
work 

[0082] 41 Management Card (Active/Standby) 

[0083] 42 InfiniBand Interface Card 

[0084] 43 DWDM Interface Card 

[0085] 44 OC-48 SON ET Card 

[0086] 45 OCV1 92 SONE T Card 

[0087] 46 10-Gigabit Ethernet Card 

[0088] 47 Ether-Cbmiei Interface Card (1-Gigabit 
Ethernet Interface Card) 

[0089] 48 Filwr Channel Interface Card 

[0090] 49 Switching Fabric Card (Active/Standby) 

[0091] 51 Gigabit Ether-Channel Processing System 

[0092] 52 10-Gigabit Ethernet Processing System 

[0093] 53 OC-48 SONET Processing System 

[0094] 54 DWDM Processing System 

[0095] 55 InfiniBand Processing System 

[0096] 56 Fib re Ch a nnel Process ing System 

[0097] 57 OC-1 92 SONET IVoccssing System 

[0098] 58 Management Processing System 

[0099] 59 Switching Processing System 

[0100] 61« Client Applications/ Upper Level Proto- 
cols 

[0101] 6lfc InfiniBand Operations/ Transport Layer 

[0102] 61c Network Layer 

[0103] 6ld I jnk Encoding within Link Layer 

[0104] 6lc Media Access Control within link Layer 

[0105] 61/ Optics Fiber(0)/ Physical Layer 

[0106] 62w InfiniBand Device/End Node 

[0107] 62/> Fibre-Channel Device/End Node 

[0108] 62c tSCSI Device/End Node 

[0109] 63 InfiniBand Interface on OIR System 

[0110] 64 Gigabit Ether-Channel Interface on OIR 
System 

[01 1 1] 65 SONET Interface on OIK System 

[0112] 66 10-Gigabit Ethernet Interface on OIR Sys- 
tem 

[0113] 67 DWDM Interface on OIK System 

[0114] 68 Fibre Channel Interface OIR System 
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[01.15] 69 Switching Processing System on 01 U Sys- 
tem (performing packet relay) 

[0116] ll\a Generic Client Applications/ Upjvr 
l«evcl Protocols 

[0117] tUb Fibre Uiannel Link lincapsulalion 

[0118] 111c Fibre Channel Common Services 

[0119] 111*/ Fibre Channel Exchange and Sequence 
Management 

[0120] Uh> Fibre Channel 8/>/l0f> Encxxlc/liecodc 
and link Control 

[0121] Ill/Fibre Channel Optics FiterfOV Physical 
Layer 

[01 22 1 121 Inftni Band/Fibre Cha nntl Gateway 

[0123] 131 InfmiBand/iSCSl Gateway 

[0124] 132a iSCSI Operation 

[0125] 132/> lithemel Unk Encoding 

[0126] 132c Ethernet Media Access Control 

[0127] 132J Ethernet Optics Fiber(0)/ Physical 
Layer 

[0128] 140 Old System PoinMo-Point Formal 

[0129] 141 Frame Start Flag Field within OIR Point- 
lo-Point Frame 

[0130] 142 Address Field within OIR Poinl-lo-Poral 
Frame 

[0131] 143 Control Field within OIK Point-to-point 
Frame 

[0132] 144 Protocol Identifier I ield within OIK 
Point -to-Point Fame 

[0133] 145 Label Field within OIR Point -lo-Point 
Frame 

[0134] 146 Information Field within OIR Point-to- 
Point Frame (Data Pay load) 

[0135] 147 Frame Check Sequence Field within OIR 
Point -to- Point Frame 

[0136] 148 Frame End Flag Field within OIR Point- 
lo-Potnt Frame 

[0137] 150 InfiniBand Frame Format 

[0138] 150a Routing Header Held within InfiniBand 
Frame 

[0139] 150* Transport Header Field within Infini- 
Band Frame 

[0140] 150c Payload Field within InfiniBand Frame 

[0141] 150J CRC Field within InfiniBand Frame 

[0142] J 60 Fibre Channel Frame 

[0143] 16&/ Start of Frame Field within Fibre Chan- 
nel Frame 

[0144] 1 606 Fibre Channel 1 leader Held within Fibre 
Channel Frame 



[0145] 1606- Optional Header Field within Fibre 
Channel Frame 

[0146} \m Payload Field within Fibre Channel 
Frame 

[0147] 160c CRC Field within fibre Channel Frame 

[0148} 160/Start of Frame Field within Fibre Chan- 
nel Frame 

[0149] 170 Ethernet Frame 

[0150] 1700 Preamble Field within Ethernet Frame 

[0151] 170/> Start Frame Delimiter (SFO) Field 
within Ethernet Frame 

[0152] 170c Destination Address (DA) Field within 
Ethernet. Frame 

[0153] 170r/ Source Addrcv< (SA) Field within Eih- 
ernel Frame 

[0154] 170c Length (LEN) Field within Ethernet 
Frame 

[0 1 55] 1 70/ Data Field wit hin Ethernet Frame 

[0156] 170/? Padding Field within Ethernet Frame 

[0157] 170ft Frame Check Sequence Field within 
Ethernet Frame 

[0158] 180 Internet Protocol ttiekel Formal 

[0159] 181 Internet Protocol Meatier 

[0160] 182 SCSI Data 

[0161] 191-262 Labels for the Data How Diagrams 

DETAILED DESCRIPTION OF THE 
PREFERRED EM BODIM ENTS 

[0162] lite invention, an InfiniBand Optical Router, has 
the capabilities to transport and route data packets to and 
from the following devices: 

[0163] InfiniBand Host Server device 

[0164] InfiniBand Target Channel device 

[0165] SONET Add-Drop Multiplexing device 

[0166] DWDM device 

[0167] Gigabit Ethernet -based IP Switching device 

[0168] Gigabit Ethcmci4>ascd IP Routing device 

[01 69] Fiber Channel Most Channel Adapter device 

[0170] ISCSI device 

DRAWINGS 
FIGS. 4 and 5 — PREFERRED EMBODIMENT 

[0171] FIG. 4 illustrates a sample physical system layout 
and FIG. 5 illustrates the logical system layout of the 
Optical InfiniBand Routing (OIR) device 31. Each type of 
line card will contain different layer 1 and layer 2 hardware 
components. For example, the OC-48 SONEl* cards 44 will 
have an optical transceiver and SONEF framer while the 
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Ethernet cards 47 will have Ethernet transceivers wiih 
MAC/GMAC interface. The OIR device contains the fol- 
lowing: 

[0172] Management Cartl(s) 41— are responsible for 
the management and control of the OIR system. In 
addition to the OIR management functions, the Man- 
agement Processing System 58 can Ik enhanced to 
perform higher-level application functions as 
needed, 

[0173] InfiniBand Interface Card(s) 42 — are respon- 
sible for interfacing with the InfiniBand Most and 
Target Channel devices. The InfiniBand Processing 
System 55 processes the InfiniBand data ami encap- 
sulates the InfiniBand payload into the OIR Point- 
to-Poim Packet format 140. 

[01743 DWDM Interface Card(s) 43-are respon- 
sible for interfacing with upstream or downstream 
DWDM system. The function of the DWDM Pn> 
cessing system 54 is mainly for multiplexing and 
de-multiplexing lower speed data packets onto the 
h tgb -speed DWDM opt teal transport. 

[0I75J OC-48 SONITT Card(s) 44— arc responsible 
fur interfacing with upstream or downstream OC-48 
SONET system, Ihe function of the SONET Pro- 
cessing system 53 is mainly for transporting SONET 
payload between SON ET capable devices including 
OIK system 31. Traffic from the SONET card 44 is 
de -multiplexed, de-framed and packet extracted 
before Sending to the Network Processor for packet 
processing. The SONET Piwxssing Syslem 53 will 
perform path, line, and section overhead processing 
and pointer alignment processing. 

[01763 OO 1 °2 SONE T Card(s) 45 — are responsible 
for interfacing with upstream or downstream 
OC-192 SONET system, 'flic function of the SONET 
Processing system 57 is mainly for transporting 
SONET payload between SONET capable devices, 
including OIR system 31, and multiplexing and 
tie-multiplexing lower speed data packet onto the 
high-speed OC-192 SONE T optical transport; 

[01773 Gigabit Ether-Channel Card(s) 47— are 
responsible for interfacing with upstream or down- 
stream Gigabit Ethernet system or OIK Gigabit 
Ether-Channel Interfaces 47. lite Gigabit Ethernet 
card will support; the GBIC interface to allow for 
serial data transmission over fiber optic or coaxial 
cable interfaces. 'Die Gigabit Ether-Channel IVocess- 
ing System 51 prixrcsses the Ethernet data and 
encapsulates the Ethernet payload into the OIR 
Point-to-Point Packet format 14a It also performs 
fragmentation and dc- fragmentation function on 
InfiniBand frame or other payload that has targe 
frame size than Ethernet frame. The fragmented 
frames are forwarded to the destination within the 
OIR system 31 by a plurality of Gigabit Ethernet 
frames. The fragmented frames are rca>*embled (or 
de -fragmented) at the destination Gigabit Ether- 
Channel Interface 47 of the OIR system 31. 

[0178] When InfiniBand traffic is transported through the 
OIR system 31 to another OIR system 31 within the OIR 
network, the Gigabit Ether-Channel Processing system 51 



will activate the Ether-Channel pRKessing function to trans- 
port the InfiniBand data packet using a plurality of Gigabit 
Eihernet channels. 'Hie Gigabit Eilic r net Processing .system 
51 is responsible for fragmenting the InfiniBand data frame 
into smaller Ethernet packets and de-fragmenting the Eth- 
ernet packets into the original InfiniBand dara frame. 

[0179] When Fibre Channel traffic is transported through 
OIR system 31 to another OIR system 31 within the OIR 
network, the Gigabit Ether-Channel IVoccssing system 51 
will activate the Ether-Channel pmce.ssing function to trans- 
port the Fibre Channel, data packet using a plurality of 
Gigabit Ethernet channels. The Gigabit Ethernet Processing 
system 51 Is responsible for fragmenting the Fibre Channel 
data frame into smaller Ethernet packets and de-fragmenting 
the Ethernet packets into the original Fibre Channel data 
frame. 

[0180] When IP traffic is transported through the OIR 
network, no special Ether-Channel function will be used. 
The IP traffic will be packeted into the OIR packet f<»rmaf to 
l*c transported between OIR systems 31 . 

[0181] When iSCSI traffic is transported through the OIR 
network, no social Ether-Clianncl ifunction will Ik* used. 
The i SCSI traffic will be encapsulated within the IP payload, 
and then the IP payload will be packeted into the OIR packet 
format to be: transported between OIR systems 3L 

[0182] 10-Gigahit Ethernet Interlace Card(s) 46— are 
responsible for interfacing with upstream or down- 
stream 10-Gigabit Eihernet systems. The function of 
the UMligabit Ethernet Processing System 52 is 
mainly for transporting 10-Gigabit Ethernet Frames 
between 10-Gigabit Ethernet capable deviecs, 
including OIR system 31, and multiplexing and 
de-multiplexing lower speed data packets onto the 
high-speed 10-Gigabii Ethernet optical transport. 

[0183] Fibre Channel interface Card(s) 48—are 
responsible for interfacing with ihe Fibre Channel 
capable Channel devices, lite Fibre Channel Pro- 
cessing System 56 processes the I'ibre Channel data 
and encapsulates the Fibre Channel frames into the 
OIR Po in t-b- Point Packet Format 140. 

[01 84] Switch ing Fabric Ca rds(s) 49 — a re rcspo nsible for 
performing arbitration amongst packets from different input 
sources. Based on the Quality of Service policies, the. 
Switching PrtHxssing System 59 will schedule the packets to 
he transported to different output ports of different interface 
cards. 

OPERAnpNS— FIGS. 6, 7^,9,10,11, 12, 13 

[0185] FIG. 6 is a block diagram illustrating how Infini- 
Band (IB) data can be transported through the OIR system 
31 to other InfiniBand devices. As is known in the prior art, 
the Open System Interconnection ("OSI") model is used to 
describe computer network. 'Hie OSI model consists of 
seven layers: physical, link, network, transport, session, 
presentation, and application. Since the OIR is a routing 
device that focuses on the network and link layer, the other 
5 layers will not be discussed in detail. 

[0186] In a normal InfiniBand operation, the client appli- 
cation 6 Ural the originating end nodes 62a invokes an IB 
operation 6I/>on an InfiniBand capable device, an Infini- 
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Band Host Channel Adapter. The Host Channel Adapter 
interprets the Wnrk Queue Elements (WQE), creates a 
request packet with the appropriate destination address. The 
destination address is composed of two unicast tdentifi- 
crs «-a Global Identifier (CilD) and l^cal Identifier (UD). 
I*he GID is ascd by the network layer 61c for muting the 
packets between subnets. The LID is used by the Link Layer 
6 Id to switch packets within a subnet. 

[0 1 87] Hie physical la ycr 61/ is rcsno nsible for establ ish - 
tng physical link and delivering received control and data 
bytes to the link layer 6W. 61c. The Link Layer 6l«f; 6lc 
provides supports for addressing, buffering, flow control 
emu detection and switching. The InfiniBand request packet 
is sent from the originating end node 31a to the OIR 
InfiniBand Interface Card 42 of an OIR system 3I& 

[0188] The OIR InfiniBand Processing System 55 encap- 
sulates lite InfiniBand packet into the 01 R Packet pay load 
150r. In addition, it will generate an OIR label 145, which 
is used by the OIR system 31 to route the InfiniBand packet 
to the destination end node 3 Xh 

[0189] In FIG. 6, the originating OIR node 31a- and 
intermediate OIR node 31b are interfacing using Gigabit 
Ethernet interfaces 64. Therefore, the Gigabit Ether-Channel 
Processing System 51 within the OIR nodes 3 L/ will convert 
the Inf iniBand packet into a plurality of smaller Ethernet 
frames before encapsulating it into the OIR pay load. The 
receiving OIR node 3li> will reassemble the Ethernet frames 
into a complete InfiniBand packet 

[0190] FIG. 6 demonstrates that when the intermediate 
OIR nodes Mb and 31c are using SONET interfaces 65, the 
InfiniBand packet will be encapsulated within an OIR pay- 
load and transported using the SONET interface 65. 

[0191] Another sample transport demonstrated in FIG. 6 
is the IB-Gigabit Ethernet interface 66 between the inter- 
mediate OIR nodes 31c and the destined OIR node 3 Iff". The 
OIR payload, which contains the InfiniBand packet encap- 
sulated within, will be transported directly on the 10-Gigabit 
Ethernet interface 66 to OIR node 3lc without further 
processing. At the destined OIR node 3 LA the InfiniBand 
packet will Ix: forwarded to the destined port on the Infini- 
Band Interface card 42 to be transported to the InfiniBand 
end itodc 62a. 

[01 92 ) FIG. 7 illustrates the method of how the InfiniBand 
packets are switched using the OIR system 3 L 

[01 93] From the InfiniBand client's 6 1« point of view; the 
InfiniBand Host Operations 6lb can be performed directly 
on the InfiniBand Target 62a. The details of how the 
InfiniBand Work Requests are performed arc transparent to 
the Client 6 \a. Ihe actual operation in packet relaying is 
done by the OIR system 31. 

[0194] From an operational point of view, the InfiniBand 
end nodes (2u are connected to a true InfiniBand switch as 
defined in the InfiniBand Architecture Specification (see 
reference [I]), although the OIR system 31 provides a 
multitude of InfiniBand ports than any existing InfiniBand 
switching device. The InfiniBand card 42 will detect 
whether the connecting InfiniBand end nodes is an Infini- 
Band host (through its 1 lost Channel Adapter interface) or an 
InfiniBand target (through its Target Channel Adapter inter- 
face) and set up the link accordingly. The Packet relay 



function 69 is provided by the OIR system 31 to switch 
InfiniBand packets from one InfiniBand interface port 63 to 
another interface port 63 within the same interface card 42 
or to another interface card on the same OIR system 31. 

[01 95] FIG, 8 illustrates the method of how the InfiniBand 
packets are transported through the OIR nodes 31#, 31/> 
using the Gigabit EUier-Channcl interfaces 65, The Gigabit 
Ether-Channel is composed of a plurality of I -Gigabit 
Ethernet interfaces 65. The multiple 1 -Gigabit Ethernet 
bandwidth is aggregated into a logical channel to support the 
higher bandwidth thai is received from the InfiniBand inter* 
face. TTic fragmentation and de-fragmentation functions are 
performed bv the Gigabit fthcr-Channe I processing system 
51. 

[0196] The InfiniBand end nodes 62/i can interface to the 
OIR system 31a, 31/> using a single InfiniBand fiber link. 
The OIR system 3 la. 3li> will in turn fragment and de- 
fragment the InfiniBand frames into multiple 1 -Gigabit 
Ethernet frame before passing them between lite OIR sys- 
tems 31tf. 31/>. The assignment of the 1 -Gigabit Ethernet 
pons to the Ether-Channel can be provisioned by the user or 
can be done using the default configuration. 

[0197] FIG. 9 illustrates the method on how the Infini- 
Band packets are routed through the OIR system 93,94 using 
the SON 1ST interface. InfiniBand frames transported over 
SONET use the Point -lo-PoirU protocol, based on IETF 
Packet over SONET (see reference [2], [3], and [4]). PPP 
protocol uses the SONET transport as a byte-oriented full- 
duplex synchronous link. The OIR Point-to- Point Packet 
140 is mapped into the SONET Synchronous Payload Enve- 
lope (SPE) based on the payload mapping. The packet data 
will be aligned at the SPE octet and occupy the full forty- 
eight octets for the OCMSc frame. 

[01 98] The InfiniBand end nodes 62/r interface to the OIR 
system 31c through the InfiniBand interface. The InfiniBand 
frames are encapsulated into the OIR Poihi-lo-Poini packet 
140. The packet is then mapped into the SONET SPE and 
forwarded to the destined OIR system 31c. At I he destined 
OIR system, the OIR system will strip out the InfiniBand 
frames from the OIR packet before forwarding it to the 
InfiniBand end nodes 62ft 

[0199] FIG. 10 illustrates the method of how the Infini- 
Band packets are switched using the DWDM Interfaces 67. 
The DWDM interface is a more effectively way of trans- 
porting data between optical system. It is a liber-optic 
transmission technique that involves the process of multi- 
plexings multitude of wavelength signals onto a single fiber. 
In the OIR system 3 Id, each DWDM Interface card 43 can 
support a plurality of wavelength signals on each port The 
DWDM layer within the OIR system has been designed in 
compliance with industry standards (see reference [13]). The 
bit rate and protocol transparency allows the DWDM inter- 
face to transport native enterprise data traffic like InfiniBand, 
Gigabit lilhemct. Fibre Channel. SONE T. IP. iSCSI. etc. on 
difierenl channels, it brings the flexibility to the OIK system 
in relation to the overall transport system: it can connect 
directly to any signal format without extra equipment. 

[0200] The OIR system contains an optical amplifier that 
is fueled by a compound called Erbium, operated in a 
specific band of the frequency spectrum. It is optimized for 
interfacing with existing fiber and can carry a multitude of 
lightwave channels. 
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[0201] InfiniBand frames transported over DWDM use 
Point -to-Poini (PPP) protocol. PPP protocol uses the 
DWDM tninsfK*ri as a byte oriented full-duplex link. The 
OIR system will use the lightweight SONET layer approach 
to transport OIR Packet over the DWDM transport. That is, 
the OIR system will preserve the SONIT I" header as a means 
of framing the data hut will not use the Time Division 
Multiplexing (TDM) approach to transport payload. The 
OIR packet is transjjortcd to the next OIR system 31t/ '\1S 
is'\ The OIR system $l(t will have the intelligence to add 
and drop wavcleugths at the destination OIR system 3U/. 

[0202] Forward lirror Correction (FliC) funetion is per- 
formed in all OIR systems 31c/ to provide the capability to 
detect signal errors, 'flic F1IC data is put into the unused 
portion of the SONET header. Network restoration and 
survivability functions will be supported by the Multiple 
Protocol Lambda Switching (MPIJ>) protocol (see reference 

[>•]>• 

[0203] OIR systems Sid can interconnect to the Infini- 
Band end nodes 62a by establishing a light path between the 
two end nodes. This light path is a logical path that is 
established so thai the optical signal can traverse the inter- 
mediate OIR system 3U/ lb reach the destination end node 
from an originating end node. 

[0204] The InfiniBand end nodes 62a interface to the OIR 
system 3 V/ through InfiniBand interfaces 63. The Infini- 
Band frames are encapsulated into the OIR Point- to- Point 
packet 140. Based on the destination address, a route and 
wavelength are assigned lo carry the OIR packet. The packet 
is then inserted into the wavelength transport and forwarded 
to the destination OIR system 94. 95. Al the destination OIR 
system, the Optica l-lilectrical-dpiica I (OEO) function is 
performed to convert the OIR packet into machine- readable 
form; The OIR system 31 will then strip oul lbc InfiniBand 
frames 150 from the OIR packet 140 before forwarding il to 
the InfiniBand end nodes 62a. 

[0205] FIG; 11 illustrates the method of how the Fibre 
Channel Frames are switched using the DWDM Interfaces 
67. The operation in transporting the Fibre Channel frames 
through the DWDM interface of the OIR system network is 
similar !o what has been discussed in previous paragraphs. 

[0206] The Fibre Channel end nodes 62/j interface lo the 
OIR system 3:1 rf through Fibre Channel interfaces 68. "lite 
Fibre Channel frames are encapsulated into the OIR Point- 
to-Poini packet 140. .Based on ihe destination address a 
route and wavelength arc assigned to carry the OIR packet, 
lite packet is then inserted into the wavelength transport and 
forwarded to the destination OIR system 3 Id. Al the des- 
tined OIR system 3I</, the Oplical-Oletlrieal-Oplieal (OliO) 
function is performed to convert the OIR packet into 
machine-readable form. The OIR system will then strip out 
ihe Fibre Channel frames 160 from ihe OIR packel 140 
Ixfore forwarding il to the Tib re Channel end nodes 62b. 
[0207] FIG. 12 illustrates the method of bow the Infini- 
Band Host Client can interface with the Fiber Channel 
'target device through the OIR system InfiniBand/Fibre 
Channel Gate way function. The InfiniBand Frames swiieh- 
ing between OIR system 3I</ is ihe same as described in 
discussion for FIG. 10. The major difference is that ihe 
destination OIR system3I(/ will perform the InfiniBand/ 
Fibre Channel gateway function to bridge the InfiniBand 
data and the Fibre Channel data. 



[0208] To support the InfiniBand/Fibre Channel gateway 
function, ihe user will provision and activate the InfiniBand/ 
Fibre Channel Gateway 1 21 function at the OIR system 31*/. 
A gateway server function 121 will be started and il will also 
setup the link between Ihe Fibre Channel devices dial arc 
connected to the OIR Fibre Channel Interface ports 68. The 
gateway server will automatically setup Ihe links with Ihe 
Fibre Channel devices. 

[0209] The gateway server will also advertise itself to ihe 
other InfiniBand Subnet Management Agents (SMA) (as 
described in InfiniBand Architecture Specification, refer- 
ence [1]) about ihe existence of InfiniBand target devices. 
The InfiniBand end node 62a, which is acting as a Host 
Server, will treat the Fibre Channel devices attached to the 
OIR system 3 In* as targets; it will be able to perform 
InfiniBand operation on them. 

[0210] The InfiniBand data are carried from ihe Client 
6l«, through the intermediate OIR system 3 Id lo ihe des- 
tination OIR system 31c/. The InfiniBand frame data 150 is 
stripped from the OIR packet 140 and is forwarded lo the 
InfiniBand/Fibre Channel gateway server 121 . The gateway 
server 121 converts the InfiniBand data 150 into meaningful 
Fibre Channel commands/control information 160 and 
passes it down to the Fibre Channel device 62b through Ihe 
destination Fibre Channel Interface port 68. 'Hie Fibre 
Channel device 62b that is attached to the Fibre Channel 
Interface pori 68 will respond lo ihe T'ibre Channel com- 
mands/control informal ion 160 as required. A similar pro- 
cess is performed when Ihe Fibre Channel device 62b 
returns l be storage data to the InfiniBand hosl 61a. 

[0211] FIG. 13 illustrates the method of how the Infini- 
Band Hosl Client 61a can interface with the iSCSI Target 
device 62c through the OIR system lufintBand/iSCSI Gate- 
way function 131. The InfiniBand Frames switching 
between OIR systems 31</ is ihe same as described in 
discussion for FIG. 10. The major difference is thai the 
destination OIR system will perform the InfiniBand/iSCSl 
gateway function to bridge the InfiniBand data 150 and ihe 
iSCSidaia 180. 

[0212] iSCSI is a storage networking technology, which 
allows users lo use high-speed SCSI (Smalt Computer 
Systems Interfaces) devices through out Lthemel networks. 
Natively, the OIR system 3ltf allows SCSI data lo be 
transported through the OIK system 31 network using Ihe 
Gigabit Uihemci interfaces 64. However, when InfiniBand is 
used fmm ihe Client 6\a to access iSCSI devices 62c, ihe 
OIR system 3 \d can provide ah additional benefit. 

[0213) The benefit of using the OIR system 31 is I ha I the 
Client 61 <r can perform ihe same InfiniBand operation 6ln 
on a plurality of devices, including InfiniBand 'largel 
devices 62a, l ; ibre Channel devices 62K and iSCSI devices 
62c. Similar In the discussion on InfiniBand/Fibre Channel 
gateway operation, ihe InfiniBand dala 150 will be con- 
verted to ISCSI comma nd/control information 180 by the 
InfiniBand/iSCSl Gateway server 131. The iSCSI informa- 
tion 180 is forwarded by the OIR system 3 Id thnwgh its 
Gigabit lilhernei interface 64 lo the iSCSI device 62c. 

Data Format— FIG. 14, 15, 16, 17, and 18 

[0214] FIG. 14 illustrates Ihe Optical InfiniBand Router 
(OIR) PuiM-io-Poim packet formal 140. "lite OIR packel 
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140 is based on a HDI.C-like PbinWtvPoini framing formal 
described in IETF RFC 1662 (sec references [21 ami [31). 
The following describes the field information: 

[0215] Flag 141, 148— *llic Hag Sequence indicates 
ihe beginning or end of a frame. 

[0216] Address. 142—1110 Address field contains the 
binary sequence I I 1 11 11 1, which indicates **all sta- 
lion address**. PPP does not assign individual station 
addresses. 

[0217] Control 143— The Control Held contains the 
binary sequence 0000001 1. 

[0218] Protocol II) 144— ITic Protocol ID identincs 
the network- layer protocol of specific packets. TTie 
proposed value for this field for InfiniBand is 
0x0042, Fibre Channel is 0x0041, and iSCSI Ls 
0x0043. (Internet Protocol field value is 0x0021). 

[0219] Ubel 145— The Label field supports ihe 01 R 
tabel switching function. 

[0220] Information field 146 — Data frame is inserted 
in the In fort nation field with a maximum length of 64 
K octets. (Note: the default length of 1,500 bytes is 
used for small packet). 

[0221] FCS (Frame Check Sequence) field 147 — A 
32-bit. (4 bytes) field provides the frame checking 
function. (Note: 32 bits instead of 16 bits is used to 
improve errc>r detection.) 

[0222) FIG. IS illustrates the method of how an Infini- 
Band Frame 150 is encapsulated within the Optical Infini- 
Band Router (OIR) IVinl-to-Foint packet format The fol- 
lowing describes the field information for the InfiniBand 
Frame: 

[0223] Routing I leader 150* "-contains the fields for 
routing the packet between subnets. 

[0224] Transport Header 1506 — contains the fields 
for InfiniBand transports. 

[0225] Paytoad 150c — contains actual frame data. 

[0226] CRC 150*/ —Cyclic Redundancy Check data 

[0227] FIG. 16 illustrates the method of how a Fibre 
Channel Frame 160 is encapsulated within the Optical 
InfiniBand Router (OIR) Point-to-Point packet format 140. 
The following describes the field information for the Fibre 
Channel Frame: 

[0228] Stan of Frame 1 60» —indicates beginning of 
a frame. 

[022*)] Fibre Channel Header 1 60/>— contains control 
and addressing information associated with the Fibre 
Channel frame . 

[0230] Optional Header 160c — contains a set of 
architected extensions to the frame header. 

[023 1] Fayload 1 60rf— contains actual frame data. 

[0232] CRC I60e— Cyclic Redundancy Cheek data 

[0233] End of Fra me 1 60/ — indica tes end o f a frame 

[0234] FIG. 1 7 illustrates the method of how an Ethernet 
Frame 170 is encapsulated within the Optical InfiniBand 



Router (OIR) Point-to-Point packet format 140. Die follow- 
ing describes the field information for the Ethernet Frame 
170: 

[0235] Preamble 170rr — indicates beginning of a 
frame. The alternating M l, VT pattern in the preamble 
is used by the Manchester encoder/de«Hkr to * ; lock 
on" to the incoming receive bit stream and allow data 
decoding. 

[0236] Stan Frame Delimiter (SFD) I70/> —is 
defined as a byte with the "lOlOIOl!" pattern. 

[0237] Destination Address (DA) 170c— denotes the 
MAC address of the receiving node. 

[0238] Source Address (SA) 17(W — denotes the 
MAC address of the sending node. 

[0239] Length (LliN) 170i> —indicates the frame 

size, 

[0240] Data 170/— contains actual frame data. 

[0241 ] PAD 170c. —contains optional padding bytes. 

[0242] Frame Check Sequence (FCS) 170// — for 
error detection. 

[0243] FIG. 1 8 illustrates the met hod of how iSCSI Frame 
180 is encapsulated within the Optical InfiniBand Router 
(OIR) Point-to-Point packet formal 140, lire iSCSI Frame 
180 is basically SCSI data encapsulated within the IP Packet, 
which in turn is wrapped within the Ethernet frame 170. Ilie 
following describes the Internet Protocol (IP) field informa- 
tion: 

[0244] IP Header 181— contains the Internet Protocol 
Header Information: 

[0245] SCSI 182— contains SCSI commands. 

[0246] FIG. 19 illustrates the method of how InfiniBand 
Processing System $5 processes the input data, while FIG. 
20 illustrates the method of how the said InfiniBand Pro- 
cessing System 55 processes the output data. 

[0247] FIG. 21 illustrates the method of how Gigabit 
Ether-Channel Processing System 51 processes the input 
data, while FIG. 22 illustrates the method of how the said 
Gigabit Ether-Channel Processing System 51 proetsses the 
output data. 

[0248] FIG. 23 illustrates the method of how Fibre Chan- 
nel Processing System 56 processes the input data, while 
FIG. 24 illustrates die method of how the said Fibre Channel 
Pnhxssing System 56 processes the output data. 

[0249] FIG. 25 illustrates the method of how Pr<K-essing 
Systems for OC-48 SONET interface. OC-IV2 SONET 
interface, DWDM interface, ami 10-Gigabit lithe met inter- 
face 53, 57, 54, 52 process the input data, while FIG. 26 
illustrates the method of how ihe said Processing Systems 
53, 57. 54, 52 process die output data, 

CONCLUSION, RAMIFICAHONS, AND SCOPE 

[0250] In addition to the combined InfiniBand switching 
and routing functions, the OIR system provides system and 
network mu It i -services for the following areas: 

[0251] InfiniBand packets over Gigabit Ethernet 
Channels (Ether-Channel) for in ter^ubnet routing 
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[02S2] InfiniBand packets over Ether- Chan nets and 
SONET for inter-network rouiing 

[0253] InfiniBand packets over Multi-Wavelength 
DWDM for WAN-based inter-domain routing/trans- 
port 

[0254] InfiniBand packets to Storage Area Network 
gateway (Fibre Channel gateway) function 

[0255] I nii n i Band packc Ls to Network Attached Stor- 
age gateway (iSCSI gateway) function 

[0256] Full InfiniBand Network Domain Manage- 
ment 

[0257] InfiniBand Quality of Service (QoS)Band- 
wiillh control to Optical Network O^S/Bandwidth 
control mailing functions 

[025K] Th is invention t akes advantages of the 1 nli n i Ba nd 
architecture, extending it to incorporate the InfiniBand capa- 
bilities to go beyond the local area network. By using the 
optical networking capabilities, it allows processing mod- 
ules and I/O modules to Ix connected through the local 
network, ill rough the metro awa network and even to the 
wide area network. 

[0259] In addition to the mulii -services support functions, 
the OIR also include the following features It) provide a 
highly reliable infrastructure: 

[0260] Fully NEBS-compliant hardware platform 

[0261] Interchangeable line card modules 

[0262] Non-blocking, redundant switching fabric 
ensures highest sendee quality 

[0263] Support for multiple access and transport 
types, including InfiniBand, Gigabit Ethernet* 
SONET, DWDM 

[0264] Full 1*1 redundancy protects management 
processors and switching fabric modules 

[0265] Hot-swappablc components ami support for 
online software ami firmware upgrades offer the 
highest availability 

[0266] Remote management tools accommodate 
either conventional or next generation network man- 
agement systems 

[0267] Replaces multiple network elements by per- 
forming functions that include InfiniBand switching 
and routing, IP switching and routing. SAN/NAS 
gateway functions, and SONET/1) WDM pay load 
switching 

[0268] This invention will be unique and easily diffcren- 
tiated from competitive products because of its comprehen- 
sive service management solution, including network, sys- 
tem, and application levels management. It oilers the 
simplicity of Ethernet technology, combined with the reli- 
ability and performance of the optical technology. It allows 
the customers to tune the system to deliver scalable, guar- 
anteed rate access to multiple network services. This will 
give our customer the important time-to-markcl and differ- 
ent iated service advantage they need to compete in the new 
networking market. 



[0269] To the potential customer, the OIR is the natural 
choice given its multi-service nature, speed, and undisputed 
cost advantage. OIR also brings new dimensions of sim- 
plicity compare to earlier generation wide-area network 
(WAN) access technologies. It will become the service 
demarcation point for traflk in LAN, SAN, NAS, MAN, arid 
WAN. 

[0270] Multi-service access eliminates the intwporation 
of multiple networking transport switches/routers within a 
data center. Any service can be attached to the OIR without 
the complexity in managing the dillerent characteristics of 
multi-vendor equipment. 

[0271] Traffic is encapsulated into the OIR transport and 
groomed to high-speed SONET/SDN paths, or trunks, 
which ultimately terminates at the required Internet, native 
Ethernet, and/or InfiniBand-based service destination. Efli- 
eiency is assured with advanced bandwidth management 
capabilitiesplus the ability to share "trunks* among multiple 
customers and across multiple platforms 

[0272] This invention simplifies the overall system net- 
work architecture by collapsing the capabilities of Infini- 
Band, II* switches and routers, SONET Add-Drop Multi- 
plexers, and DWDM into one cost-effective and powerful 
optical router. Potential customers can select one or more 
service components that they want to use within our system. 
The service components can be interfaces for InfiniBand 
(2.5 gigabit or 10 gigabit), Gigabit Ethernet (3x1 gigabit or 
10 gigabit), SONET (OC-4S or 0019$ or DWDM (4 
channels OC-48 or 4 channels ■OO1.02). 

BEST MODE FOR CARRYING OUT H IE 
INVENTION 

[0273] 'Die problems solved by this invention is: 

[0274] how to extend the System -Area Networking 
of the InfiniBand lechnolugy beyond the limited 
distance. The current specification defines the fiber 
connection distance to be less than 100 meters. 

[0275] how Jo transport and route data between 
InfiniBand devices using the Gigabit Ethernet-based 
data transport. 

[0276] how to combine a plurality of Gigabit Ether- 
net data streams into one InfiniBand data stream. 

[0277] how to segment data between InfiniBand 
devices and the Gigabit Ethemct4?asecl devices 

[0278] how to transport and mute data between 
InfiniBand devices using the SONET AthJ-Drbp 
Multiplexing data transport. 

[0279] how to transport and route dais between 
InfiniBand devices using the Dense Wavelength 
Division Multiplexing (DWDM) data transport. 

[0280] how to transport and route data between Fibre 
Channel devices using the Dense Wavelength Divi- 
sion Multiplexing (DWDM) data transport. 

[0281] Operationally, one uses the Optical InfiniBand 
routing device to transport data from InfiniBand host or 
target devices through the OIK network to the destination 
InfiniBand host or target devices. 
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In the Claims: 

L (Original) A network administration method for provisioning logical configuration 
links for at least two network devices through a dedicated graphical user interface form, the 
method comprising: 

selecting a network device having at least one network interface through the dedicated 

graphical user interface form; 

determining local interface and next neighbor information for the network device; 
determining whether the local interface and next neighbor information is associated with 

a logical configuration link stored among a plurality of logical configuration links in a logical 

link database- 
creating a new logical configuration link when the local interface and next neighbor 

information is not associated with any of the logical configuration links in the logical link 

database; 

storing the new logical configuration link in the logical link database; 
validating the new logical configuration link- 
sending the new logical configuration link to the network device; and 
displaying a graphical representation of the new logical configuration link on a display 



2. (Original) The method of claim 1 , wherein the step of creating a new logical 
configuration link further comprises the steps of: 

selecting a link type; 

selecting a link numbering type for the new logical configuration link- 
selecting a link application for the new logical configuration link; 
selecting a sub layer interface type for the new logical configuration link; 
creating a first endpoint for the new logical configuration link; and 
creating a second endpoint for the new logical configuration link. 

3. (Original) The method of claim 2, wherein the step of selecting the link type further 



device. 
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15 



20 



25 



comprises the step of: 

selecting the link type from among a group consisting of: point-to-point, point-to-IP, and 
point-to-subnet. 

4. (Original) The method of claim 2, wherein the step of selecting a link numbering 
type further comprises the step of: 

selecting the link numbering type from a group consisting of: a numbered type and an 
unnumbered type. 

5. (Original) The method of claim 2, wherein the step of selecting a link application 
further comprises the step of: 

selecting the link application from a group consisiing of: Internet Protocol Forwarding, 
Multi-Protocol Label Switching and Internet Protocol Forwarding, and Multi -Protocol Label 
Switching. 

6. (Original) The method of claim 2, wherein the step of selecting a sub layer interface 
type further comprises the step of: * 

selecting the sub layer interface type from a group consisiing of: Packet Over Sonet, 
Asynchronous Transfer Mode, and GigElhernet. 

7. (Original) The method of claim I , further comprising the step of: 
modifying a logical configuration link in the logical link database. 

8. (Original) The method of claim I , further comprising the step of: 
deleting a logical configuration link in the logical link database. 

9. (Original) Apparatus for provisioning logical configuration links comprising: 
a logical link database for storing logical configuration links; 

a processing system coupled to the logical link database for accessing the logical link 
database; and 

a display device coupled to the processing system for displaying a graphical user 
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interface form comprising a graphical representation of a logical configuration link. 



10. (Original) The apparatus of claim 9 wherein the display device provides an ability to 
select a network device having at least one network interface through the graphical user interface 
form. 

I K (Original) The apparatus of claim 9 wherein the processing system determines local 
interface and next neighbor information for the network device. 

12. (Original) The apparatus of claim 1 1 wherein the processing system determines 
whether the local interface and next neighbor information is associated with one of the logical 
configuration links stored in the logical link database. 



13. (Original) The apparatus of claim 12 wherein the processing system creates a new 
logical configuration link when the local interface and next neighbor information is not 
associated with any of the logical configuration links stored in the logical link database. 

Hr (Original) The apparatus of claim 13 wherein the processing system causes the new 
logical configuration link to be stored in the logical link database. 

15. (Original) The apparatus of claim 14 wherein the processing system validates the 
new logical configuration link. 

16. (Original) The apparatus of claim 15 wherein the processing system causes the new 
logical configuration link to be sent to the network device. 
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REMARKS/ARGUMENTS 



Claims 1-16 are pending in the application. The Examiner states claims 1-15 [sic] are rejected. 
Applicant respectfully requests reconsideration of pending claims 1-1-6. 

The Examiner has rejected claims I -4 and 7- 1 5 under 35 U.S.C.§ 1 02(b) as being anticipated by 
Hansen (United States Patent No. 5,838,907). Applicant respectfully disagrees. 

Regarding claim 1 , Applicant submits the cited portions of the cited reference fail to disclose 
the subject matter of claim I . As one example, Applicant submits the cited portions of the cited 
reference fail to disclose "determining whether the local interface and next neighbor information is 
associated with a logical configuration link stored among a plurality of logical configuration links in a 
logical link database." While the Examiner cites "(column 5, lines 35-65; Subsystem is a logical link 
database)," Applicant does not see teaching in the cited portion of the cited reference as to the above- 
referenced "determining" step. As another example, Applicant submits the cited portions of the cited 
reference fail to disclose "creating a new logical configuration link when the local interface and next 
neighbor information is not associated with any of the logical configuration links in the logical link 
database." Applicant notes the Examiner has previously stated, "Hansen does not teach creating a new 
logical configuration link when the local interface and next neighbor information is not associated with 
any of the logical configuration links in the logical link database and storing the new logical 
configuration link in the logical link database." Now, however, Applicant notes the Examiner cites 
"(column 15, lines 30-50; Unconnected PCI slot are unassociated connection)" as allegedly disclosing 
such feature. Applicant notes claim I does not recited "unassociated connection." Rather, Applicant 
notes claim 1 recites, in part, "...when the local interface and next neighbor information is not 
associated with any of the logical configuration links in the logical link database." Moreover, 
Applicant does not see teaching as to "creating a new logical configuration link..." in the cited portion 
of the cited reference. Thus, Applicant submits the Examiner has not made a prima facie showing of 
anticipation with respect to claim 1 . 

As another example, Applicant- submits the cited portions of the cited reference fail to disclose 
"storing the new logical configuration link in the logical link database." While the Examiner cites 
"(column 13, lines 10-30)," Applicant can find no reference to "storing" anything in the cited portion of 
the cited reference. Rather, Applicant notes the cited portion of the cited reference merely refers to 



-5- 




Application No: 10/027.821 



PATENT 



"...the configuration file for the origination device or entity is reviewed...," "...the configuration file 
for the destination device or entity is reviewed... "a determination is made at step 156 that the 
devices/entities cannot be connected/* "and "The proposed connection is then deleted... ." Thus. 
Applicant submits the cited portions of the cited reference fail to disclose the subject matter of claim I. 

Regarding claim 2, Applicant submits the cited portions of the cited reference fail to disclose 
the subject matter of claim 2. As one example, Applicant submits the cited portions of the cited 
reference fail to disclose "selecting a link numbering type for the new logical configuration link." 
While the Examiner cites "(column 1 1 , lines 13-30; PCI slots are numbered configuration links)," 
Applicant does not see mention of "selecting a link numbering type for the new logical configuration 
link." Thus, Applicant submits the cited portions of the cited reference fail to disclose the subject 
matter of claim 2. 

Regarding claim 3, Applicant submits the cited portions of the cited reference fail to disclose 
the subject matter of claim 3. Applicant has submitted argument for the allowability of claims 1 and 2, 
from which claim 3 depends. Thus, Applicant submits claim 3 is also in condition for allowance. 

Regarding claim 4, Applicant submits the cited portions of the cited reference fail to disclose 
the subject matter of claim 4. While the Examiner cites "(column 1:1., lines 13-30; PCI slots are 
numbering type, column 13, lines 28-45; a list of connection interface is un-number type)," Applicant 
reiterates Applicant's argument with respect to claim 2 and further submits Applicant does not see 
mention of "an unnumbered type" in the cited portion of the cited reference. Therefore, Applicant 
submits claim 4 is in condition for allowance. 

Regarding claim 7, Applicant s.ubmits the cited portions of the cited reference fail to disclose 
the subject matter of claim 7. As one example. Applicant submits the cited portions of the cited 
reference fail to disclose "modifying a logical configuration link in the logical link database." While 
the Examiner cites "(column 1 1 , lines 41-53; Editing is modifying)," Applicant notes column II, line 
46 states, in part, "...edit the map...." Applicant further notes column 1 1, lines 39-44, state, in part, 
"...if the network administrator decides to go to the network workspace 102 to edit either the blank 
map initially loaded into the network workspace 102 at step 48 or, if a saved map was retrieved from 
the map files 16 by executing an 'open file* command at step 52. the retrieved map loaded into the 
network workspace at step 52,...." Applicant submits such an alleged teaching of "...a logical 
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configuration link in the logical link database" is inconsistent with what the Examiner alleged to teach 
the same with respect to claim 1 , from which claim 7 depends. Thus, Applicant submits claim 7 is in 
condition for allowance. 

Regarding claim 8, Applicant submits the cited portions of the cited reference fail to disclose 
the subject matter of claim 8. As one example, Applicant submits the cited portions of the cited 
reference fail to disclose "deleting a logical configuration link in the logical link database." While the 
Examiner cites "(column 10, lines 1-20)," Applicant sees reference to '"delete device"' in column 10, 
line 5, but no other mention of "delete" or "deleting." Applicant submits the Examiner's apparent 
assertion that "'delete device*" purportedly teaches "deleting a logical configuration link in the logical 
link database" appears to contradict what the Examiner alleges the cited portions of the cited reference 
to teach (e.g., with regard to "a logical configuration link") in the rejection of claim 1, from which 
claim 8 depends. Thus, Applicant submits claim 8 is in condition for allowance. 

Regarding claim 9, Applicant submits the cited portions of the cited reference fail to disclose 
the subject matter of claim 9. As one example, Applicant submits the cited portions of the cited 
reference fail to disclose "a logical link database for storing logical configuration links." Applicant 
notes the Examiner has previously stated, "Hansen does not teach a logical link database for storing 
logical configuration links." Now, however, without elaborating, the Examiner merely states, "As per • 
claim 9, it is of the same scope as claim 1 . Supra." Applicant respectfully disagrees. Applicant 
submits claim 9 differs in numerous respects from claim 1 . Applicant submits the Examiner has failed 
to make a prima facie showing of anticipation with respect to claim 9. As one example, Applicant sees 
no allegation by the Examiner, either with respect to claim 9 or with respect to claim I, that the cited 
portions of the cited reference disclose "a processing system coupled to the logical link database for 
accessing the logical link database." Thus, Applicant submits claim 9 is in condition for allowance. 

Regarding claim 10, Applicant submits the cited portions of the cited reference fail to disclose 
the subject matter of claim 10. Applicant has submitted argument for the allowability of claim 9, from 
which claim 10 depends. Thus, Applicant submits claim 10 is also in condition for allowance. 

Regarding claim 1 1 , Applicant-submits the cited portions of the cited reference fail to disclose 
the subject matter of claim 1 1. As one example, Applicant submits the cited portions of the cited 
reference fail to disclose "...wherein the processing system determines local interface and next 
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neighbor information for the network device." While the Examiner cites "(figure 7, items 1 14, 1 16, 
120, 126, 122, 118, and 124)/ Applicant reiterates Applicant's argument with respect to claim 9, from 
which claim 1 1 depends, that Applicant sees no allegation by the Examiner, either with respect to 
claim 9 or with respect to claim I, tharthe cited portions of the cited reference disclose "a processing 
system....* 4 Accordingly, Applicant submits the Examiner has failed to make a prima facie showing of 
anticipation with respect to claim 1 1 and the cited portions of the cited reference fail to anticipate the 
subject matter of claim II. Thus, Applicant submits claim II is in condition for allowance. 

Regarding claim 12, Applicant submits the cited portions of the cited reference fail to anticipate 
the subject matter of claim 12. As one example, Applicant submits the cited portions of the cited 
reference fail to disclose "...wherein the processing system determines whether the local interface and 
next neighbor information is associated with one of the logical configuration links stored in the logical 
link database." While the Examiner cites, "(column 15, lines 30-50; Unconnected PCI slot are 
unassociated connection)," Applicant notes claim 12 does not recite "unassociated connection." 
Moreover, Applicant submits the Examiner's assertion as to the purported teachings of the cited 
portions of the cited reference with respect to claim 12 appear to contradict the Examiner's assertions 
as to the purported teachings of the cited portions of the cited reference with respect to one or more 
claims from which claim 12 depends, either directly or indirectly. Thus, Applicant submits claim 12 is 
in condition for allowance. 

Regarding claim 13, Applicant submits the cited portions of the cited reference fail to anticipate 
the subject matter of claim 13. As one example, Applicant submits the cited portions of the cited 
reference fail to disclose "...wherein the processing system creates a new logical configuration link 
when the local interface and next neighbor information is not associated with any of the logical 
configuration links stored in the logical link database." While the Examiner cites, "(column 13, lines 
10-30)," Applicant can find no mention of "creates" in the cited portion of the cited reference. Rather, 
Applicant notes the cited portion of the cited reference merely refers to "...the configuration file for the 
origination device or entity is reviewed...," "...the configuration file for the destination device or 
entity is reviewed...," "a determini nation is made at step 156 that the devices/entities cannot be 
connected," and "The proposed connection is then deleted...." Thus, Applicant submits the cited 
portions of the cited reference fail to disclose the subject matter of claim 1 3. 
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Regarding claim 14, Applicant submits the cited portions of the cited reference fail to anticipate 
the subject matter of claim 14. As one example, Applicant submits the cited portions of the cited 
reference fail to disclose "...wherein the processing system causes the new logical configuration link to 
be stored in the logical link database." * While the Examiner cites "(column 13, lines 10-30)," Applicant 
can find no mention of "stored" in the cited portion of the cited reference. Rather, Applicant notes the 
cited portion of the cited reference merely refers to "...the configuration file for the origination device 
or entity is reviewed...," "...the configuration file for the destination device or entity is reviewed...," 
"a determinination is made at step 156 that the devices/entities cannot be connected," and 'The 
proposed connection is then deleted...." Thus, Applicant submits the cited portions of the cited 
reference: fail to disclose the subject matter of claim 14. 

Regarding claim 15, Applicant submits the cited portions of the cited reference fail to anticipate 
the subject matter of claim 15. As one example, Applicant submits the cited portions of the cited 
reference fail to disclose "...wherein the processing system validates the new logical configuration 
link." While the Examiner cites "(column 13, lines 10-30)," Applicant can find no mention of 
"validates the new logical configuration link" in the cited portion of the cited reference. Rather, 
Applicant notes the cited portion of the cited reference merely refers to "...the configuration file for the 
origination device or entity is reviewed.. .," "...the configuration file for the destination device or 
entity is reviewed. . . ," "a determinination is made at step 156 that the devices/entities cannot be 
connected," and "The proposed connection is then deleted...." Thus, Applicant submits the cited 
portions of the cited reference fail to disclose the subject matter of claim 1 5. 

Regarding claim 16, Applicant submits the cited portions of the cited reference fail to anticipate 
the subject matter of claim 16. As one example, Applicant submits the cited portions of the cited 
reference fail to disclose "...wherein the processing system causes the new logical configuration link to 
be sent to the network device." Whiie'the Examiner cites "(column 14, lines 4 1 -60), H Applicant can 
find no mention of "causes the new logical configuration link to be sent to the network device" in the 
cited portion of the cited reference. Rather, Applicant submits the Examiner does not identify any 
element that the Examiner would purport to teach "the network device." Thus, Applicant submits the 
cited portions of the cited reference fail to disclose the subject matter of claim 16. 
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The Examiner has rejected claim 5 under 35 U.S.C § 103(a) as allegedly being unpatentable 
over Hansen in view of Hansen (United States Patent No. 5,838,907), and further in view of Hardwick 
(United States Patent No. 5,550,816). Applicant respectfully disagrees. 

Regarding claim 5, Applicant notes the Examiner acknowledges "Hansen fails to teach the step 
of selecting a link application from a group consisting of: Internet Protocol Forwarding, Multi- 
Protocol Label Switching and Internet Protocol Forwarding, and Multi-Protocol Label Switching." 
The Examiner alleges the Hardwick reference teaches such feature at "(column 43, lines 60- column 
44, lines 5)." However, Applicant can find no mention of "Internet Protocol Forwarding/' "Multi- 
Protocol Label Switching and Internet Protocol Forwarding," or "Multi-Protocol Label Switching" in 
the cited portion of the Hardwick reference. Thus, Applicant submits the Examiner has not made a 
prima facie showing of obviousness with respect to claim 5. Also, while the Examiner states as a 
purported motivation for attempting to combine the purported teachings "in order to provide a wide 
m variety of access control tools that permit network managers to define the policy of how network group 
can interact with themselves," Applicant respectfully disagrees that such purported motivation would 
suggest combination of the alleged teachings of the cited portions of the cited references. Thus, 
Applicant submits claim 5 is in condition for atlowance. 

The Examiner has rejected claim 6 under 35 U.S.C. § 103(a) as allegedly being unpatentable 
over Hansen (United States Patent No. 5,838,907) in view of Chui (United States Patent No. 
2002/0165978). Applicant respectfully disagrees. 

Regarding claim 6, Applicant notes the Examiner acknowledges "Hansen fails to teach 
selecting a sub layer interface type further comprising the step of: Selecting the sub- layer interface 
type from a group consisting of: Packet over Sonet, Asynchronous Transfer Mode, and GigEthcrnct." 
The Examiner alleges the Chui reference teaches such feature at "(Paragraph 0201)." However, 
Applicant can find no mention of "Asynchronous Transfer Mode" or "GigEthemet" in the cited portion 
of the Chui reference. Even the mention of "SONET" is in the context of "the lightweight SONET 
layer approach" where "the OIR system will preserve the SONET header as a means of framing the 
data but will not use the Time Division Multiplexing (TDM) approach to transport payload." Thus, 
Applicant submits the Examiner has not made a prima facie showing of obviousness with respect to 
claim 6. Also, while the Examiner states as a purported motivation for attempting to combine the 
purported teachings "in order to provide a wide variety of access control tools that permit network 
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managers to define the policy of how network group can interact with themselves/' Applicant 
respectfully disagrees that such purported motivation would suggest combination of the alleged 
teachings of the cited portions of the cited references. Thus, Applicant submits claim 6 is in condition 
for allowance. 



Non^Compliant Amendment mailed 03/16/2006, Applicant petitioned the Commissioner of Patents 
add the time lost due to the improper issuance of the Notice of Non-Compliant Amendment (37 CFR 
L 121) to any patent term adjustment and/or patent term extension to any patent that may issue from 
the pending application. Applicant also enclosed therewith payment for an extension of time under 37 
CFR 1.136(a) to respond to the improperly issued Notice of Non-Compliant Amendment (37 CFR 
1.121). However, as Applicant submits Applicant's original response was fully compliant with 37 CFR 
1.121, Applicant requested a refund of Applicant's payment. Applicant has received neither of the 
requested items, Applicant reiterates Applicant's petition and request for such items. 

In conclusion, Applicant has overcome all of the Office's rejections, and early notice of 
allowance to this effect is earnestly solicited. If, for any reason, the Office is unable to allow the 
Application on the next Office Action, and believes a telephone interview would be helpful, the 
Examiner is respectfully requested to contact the undersigned attorney. 



In Applicant's response to what Applicant considers to be the inappropriately issued Notice of 



Respectfully submitted. 



Date 




Ross D. Snyder, Reg. No. 37,730 

Attorney for Applicant(s) 

Ross D. Snyder & Associates, Inc. 

POBox 164075 

Austin, Texas 787 1 6-4075 

(512)347-9223 (phone) 

(512) 347-9224 (fax) 
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DETAILED ACTION 



This action is responsive to communications: Amendment, filed on 4/26/07, 



This action is made final. 



Claims 1-15 are pending in this application. Claims 1 and 9 are independent claims. 



Claim Rejections - 35 (JSC §102 



The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that form the 
basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(b) the invention was patented or described in a printed publication in this or a foreign country or in public use or on 
sale in this country, more than one year prior to the date of application for patent in the United States. 

Claims 1-4, and 7-15 are rejected under 35 U.S.C. 102(b) as being anticipated by Hansen 
US Patent 5,838,907. 

As per claim 1, Hansen teaches a network administration method for provisioning logical 
configuration links for at least two network devices through a dedicated graphical user interface 
form, the method comprising: 

Selecting a network device having at least one network interface through the dedicated 
graphical user interface form; (figure 3b, column 15, lines 18-32; To configure a device, the 
device must be selected first) 

Determining local interface and next neighbor information for the network device; (figure 
7, items 1 14, 116, 120, 126, 122, 1 18, and 124) 

Determining whether the local interface and next neighbor information is associated with 
a logical configuration link stored among a plurality of logical configuration links in a logical 
link database; (column 5, lines 35-65; Subsystem is a logical link database) 
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Creating a new logical configuration link when the local interface and next neighbor 
information is not associated with any of the logical configuration links in the logical ink 
databases; (column 15, lines 30-50; Unconnected PCI slot are unassociated connection) 



Storing the new logical configuration link in the logical link database; (column 1 3, lines 

10-30) 



Sending the new logical configuration link to the network device; (column 14, lines 41- 

60) and 

Displaying a graphical representation of the new logical configuration link on a display 
device, (column 14, lines 41-60) 

As per claim 2, Hansen teaches the method of claim 1 . Hansen further teaches the step of 
creating a new logical configuration lik further comprises the steps of ; 

Selecting a like type; (column 13, lines H0; x. 25, frame relay, PPP and HDLC are link 

types) 

Selecting a link numbering type for the new logical configuration link; (column 1 1 , lines 
13-30; PCI slots are numbered configuration links) 

Selecting a link application for the new logical configuration link; (column 14, lines 5-25; 
The script commands are applications-column 13, lines 65-column 14, lines 5) 

Selecting a sub layer interface type for the new logical configuration link; (column 14, 
lines 15-25; Connection identifiers are configuration links) 

Creating a first endpoint for the new logical configuration link; and 



Validating the new logical configuration link; (column 13, lines 10-30) 
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Creating a second endpoint for the new logical configuration link.(column 13, lines 10- 



As per claim 3, Hansen teaches the method of claim 2, wherein the step of selecting the 
link type further comprises the step of: 

Selecting the link type from among a group consisting of: point-to-point, point-to-IP, and 
pint-to-subnet, (column 13, lines 1-10; x. 25, frame relay, PPP and HDLC) 

As per claim 4, Hansen teaches the method of claim 4, wherein the step of selecting the a 
link number type further comprises the step of: 

Selecting the link numbering type from a group consisting of: a numbered type and an 
un-number type, (column 11, lines 13-30; PCI slots are numbering type, column 13, lines 28- 
45; a list of connection interface is un-number type) 

As per claim 7, Hansen teaches the method of claim 1 , Hansen further teaches the step of: 
Modifying a logical configuration link in the logical link databases, (column 1 1, lines 
41-53; Editing is modifying) 

As per claim 8, Hansen teaches the method of claim 1 , Hansen further teaches the step of: 
Deleting a logical configuration link in the logical link database, (column 10, lines 1-20) 
As per claim 9, it is of the same scope as claim L Supra. 

As per claim 10, Hansen teaches the apparatus of claim 9. Hansen teaches wherein the 
display device provides an ability to select a network device having at least one network 
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interface through the graphical user interface form, (figure 3b, column 1 5, lines 1 8-32; To 
configure a device, the device must be selected first) 

As per claim 11, Hansen teaches the apparatus of claim 9, Hansen further teaches the 
processing system determines local interface and next neighbor information for the network 
device, (figure 7, items 114, 1 16, 120, 126, 122, 118, and 124) 

As per claim 12, Hansen teaches the apparatus of claim 11, Hansen further teaches the 
processing system determines whether the local interface and next neighbor information is 
associated with one of the logical configuration links stored in the logical link database, (column 
J 5, lines 30-50; Unconnected PCI slot are unassociated connection) 

As per claim 13, Hansen teaches the apparatus of claim 12, Hansen further teaches 
creates a new logical configuration link when the local interface and next neighbor information is 
not associate with any of the logical configuration links stored in the logical link database, 
(column 13, lines 10-30) 

As per claim 14, Hansen teaches the apparatus of claim 13, Hansen further teaches the 
processing system causes the new logical configuration link to be stored in the logical link 
database, (column 13, lines 10-30) 

As per claim 1 5, Hansen teaches the apparatus of claim 14, Hansen further teaches the 
processing system validates the new logical configuration link, (column 1 3, lines 10-30) 

As per claim 16, Hansen teaches the apparatus of claim 15, Hansen further teaches the 
processing system cause the new logical configuration link to be sent to the network device, 
(column 14, lines 41-60) 
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Claim Rejections - 35 USC§ J 03 



The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior an arc 
such that the subject matter as a whole would have been obvious at the lime the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

Claim 5 is rejected under 35 U.S.C. 103(a) as being unpatentable over Hansen in view of 
Hansen US Patent 5,838,907 in view of Hard wick US Patent 5,550,816. 

As per claim 5, Hansen teaches the method of claim 2. Hansen fails to teach the step of 
selecting a link application from a group consisting of: 

Internet Protocol Forwarding, Multi-Protocol Label Switching and Internet Protocol 
Forwarding, and Multi-Protocol Label Switching. 

Hard wick teaches the step of selecting a link application from a group consisting of: 

Internet Protocol Forwarding, Multi-Protocol Label Switching and Internet Protocol 
Forwarding, and Multi-Protocol Label Switching, (column 43, lines 60- column 44, lines 5) 

It would have been obvious to an artisan at the time of the invention to include 
Hard wick's teaching with method of Hansen in order to provide a wide variety of access control 
tools that permit network managers to define the policy of how network group can interact 
within themselves. 

Claims 6 is rejected under 35 U.S.C. 103(a) as being unpatentable over Hansen in view of 
Hansen US Patent 5,838,907 in view of Chui US Patent 2002/0165978. 
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As per claim 6, Hansen teaches the method of claim 2, Hansen fails to teach selecting a 
sub layer interface type further comprises the step of: 

Selecting the sub-layer interface type from a group consisting of; Packet over Sonet, 
Asynchronous Transfer Mode, and GigEthernet. 

Chui teaches selecting a sub layer interface type further comprises the step of ; 

Selecting the sub-layer interface type from a group consisting of; Packet over Sonet, 
Asynchronous Transfer Mode, and GigEthernet. (Paragraph 020 1 ) 

It would have been obvious to an artisan at the time of the invention to include ChuPs 
teaching with method of Hansen in order to provide a wide variety of access control tools that 
permit network managers to define the policy of how network group can interact within 
themselves. 

Response to A rgument 
Applicant's arguments filed on 4/26/07 have been fully considered but they are not 
persuasive. 

Applicant's argument focused on the following: 

A) Hansen fails to teach "determining whether the local interface and next neighbor 
information is associated with a logical configuration link stored among a plurality of logical 
configuration links in a logical link database." 

B) Hansen fails to teach "creating a new logical configuration link when the local 
interface and next neighbor information is not associated with any of the logical configuration 
links in the logical link database and storing the new logical configuration link in the logical link 
database." 
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C) Hansen fails to teach "selecting a link numbering type for the new logical 
configuration link." 

Examiner disagrees. 

A) The examiner does not agree for the following reasons: 

During patent examination, the pending claims must be "given >their< broadest 
reasonable interpretation consistent with the specification." > In re Hyatt, 21 1 F.3d 1367, 1372, 
54 USPQ2d 1664, 1667 (Fed. Cir. 2000). Although the claims are interpreted in light of the 
specification, limitations from the specification are not read into the claims. See In re Van 
Geuns f m F.2d 1181, 26 USPQ2d 1057 (Fed. Cir. 1993). 

Applicant always has the opportunity to amend the claims during prosecution, and broad 
interpretation by the examinerreduces the possibility that the claim, once issued, will be 
interpreted more broadly than is justified. In re Prater, 415 F.2d 1393, 1404-05, 162 USPQ 541, 
550-51 (CCPA 1969). 

In this case, Hansen teaches this limitation because it identifies the location of the 
configuration file, and the location could be on a local drive or on a network neighborhood, (see 
Hansen, column 5 ,lines 45-65) By doing that, Hansen determines whether the logical 
configuration links to a local database or a network database. 

B) Hansen teaches this limitation because the PCI slot 3, which is not connected or 
associated with any logical configure, can be configured to be linked to a network device and 
configured according to device's information, (see Hansen, column 15 ,lines 40-60) By doing 
so, Hansen creates a new logical configuration on the PCI slot 3 when none existed before. 
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Contact Information 



Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Peng Ke whose telephone number is (571) 272-4062. The 
examiner can normally be reached on M-Th and Alternate Fridays 8:30-5:00. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Kristine L. Kincaid can be reached on (571) 272-4063. The fax phone number for 
the organization where this application or proceeding is assigned is 571-273-8300. 

information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). If you would 
like assistance from a USPTO Customer Service Representative or access to the automated 
information system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 
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4 % wj 1^ the united states Patent and trademark office 

gplicant(s): Denis Proulx, et al. 
Title: METHOD AND SYSTEM FOR IP LINK MANAGEMENT 
App.No.: 10/027,821 Filed: 12-19-2001 

Examiner: Ke, Peng Group Art Unit: 2174 

AttyDkt. No. 1400.1374890 

Mail Stop AF 
Commissioner for Patents 
PO Box 1450 

Alexandria, V A 22313-1450 

RESPONSE 

Dear Sir: 

In response to the Office action of July 24, 2007, Applicant submits the following response: 
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In the Claims: 

1. (Original) A network administration method for provisioning logical configuration 
links for at least two network devices through a dedicated graphical user interface form, the 
method comprising: 

5 selecting a network device having at least one network interface through the dedicated 

graphical user interface form; 

determining local interface and next neighbor information for the network device; 
determining whether the local interface and next neighbor information is associated with 
a logical configuration link stored among a plurality of logical configuration links in a logical 
10 link database; 

creating a new logical configuration link when the local interface and next neighbor 
information is not associated with any of the logical configuration links in the logical link 
database; 

storing the new logical configuration link in the logical link database; 
15 validating the new logical configuration link; 

sending the new logical configuration link to the network device; and 

displaying a graphical representation of the new logical configuration link on a display 

device. 

20 2. (Original) The method of claim I, wherein the step of creating a new logical 
configuration link further comprises the steps of: 
selecting a link type; 

selecting a link numbering type for the new logical configuration link; 
selecting a link application for the new logical configuration link; 
25 selecting a sub layer interface type for the new logical configuration link; 

creating a first endpoint for the new logical configuration link; and 
creating a second endpoint for the new logical configuration link. 
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3. (Original) The method of claim 2, wherein the step of selecting the link type further 
comprises the step of: 

selecting the link type from among a group consisting of: point-to-point, point-to-IP, and 
point-to-subnet. 

5 . .. 

4. (Original) The method of claim 2, wherein the step of selecting a link numbering 
type further comprises the step of: 

selecting the link numbering type from a group consisting of: a numbered type and an 
unnumbered type. 
10 :"V 

5. (Original) The method of claim 2, wherein the step of selecting a link application 
...... further comprises the step of: 

selecting the link application from a group consisting of: Internet Protocol Forwarding, 
Multi-Protocol Label Switching and Internet Protocol Forwarding, and Multi-Protocol Label 
15 Switching. 

6. (Original) The method of claim 2, wherein the step of selecting a sub layer interface 
type further comprises the step of: 

selecting the sub layer interface type from a group consisting of: Packet Over Sonet, 
20 Asynchronous Transfer Mode, and GigEthernet. 

7; (Original) The method of claim 1 , further comprising the step of: 
modifying a logical configuration link in the logical link database. 

25 8. (Original) The method of claim 1, further comprising the step of: 
deleting a logical configuration link in the logical link database. 

9. (Original) Apparatus for provisioning logical configuration links comprising: 
a logical link database for storing logical configuration links; 
30 a processing system coupled to the logical link database for accessing the logical link 

database; and 
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a display device coupled to the processing system for displaying a graphical user 
interface form comprising a graphical representation of a logical configuration link. 

10. (Original) The apparatus of claim 9 wherein the display device provides an ability to 
select a network device having at least one network interface through the graphical user interface 
form. 

I I. (Original) The apparatus of claim 9 wherein the processing system determines local 
interface and next neighbor information for the network device. 

12. (Original) The apparatus of claim 1 1 wherein the processing system determines 
whether the local interface and next neighbor information is associated with one of the logical 
configuration links stored in the logical link database. 

1 3. (Original) The apparatus of claim 12 wherein the processing system creates a new 
logical configuration link when the local interface and next neighbor information is not 
associated with any of the logical configuration links stored in the logical link database. 

14. (Original) The apparatus of claim 13 wherein the processing system causes the new 
logical configuration link to be stored in the logical link database. 

1 5. (Original) The apparatus of claim 14 wherein the processing system validates the 
new logical configuration link. 

16. (Original) The apparatus of claim 15 wherein the processing system causes the new 
logical configuration link to be sent to the network device. 

17. (New) The method of claim 1 wherein creating the new logical configuration link 
when the local interface and next neighbor information is not associated with any of the logical 
configuration links in the logical link database occurs based on interfaces information entered by 
a user. 
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18. (New) A method comprising: 

selecting a link type; 
selecting a link numbering type; 
5 selecting a link application; 

selecting a sub layer interface type; 
creating a first endpoint; 
creating a second endpoint; 

populating form panels with the link type, the link numbering type, the link application, 
10 and the sub layer interface type; 

receiving user input of interfaces information; 
validating the interfaces information; 

creating a link in accordance with the interfaces information; and 
provisioning the link. 
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REMARKS/ARGUMENTS 

Claims 1-16 are pending in the application. The Examiner has rejected claims 1-16. Applicant 
has added new claims 17 and 18, Applicant respectfully requests reconsideration of pending claims 1- 
18. 

The Examiner characterizes Applicant's argument as being focused on the following: 

(A) Hansen fails to teach "determining whether the local interface and next neighbor 
information is associated with a logical configuration link stored among a plurality 
of logical configuration links in a logical link database. " 

(B) Hansen fails to teach 'creating a new logical configuration link when the local 
interface and next neighbor information is not associated with any of the logical 
configuration links in the logical link database and storing the new logical 
configuration link in the logical link database." 

(C) Hansen fails to teach "selecting a link numbering type for the new logical 
configuration link/' 

The Examiner disagrees. With respect to the Examiner's characterization (A) above, the 
Examiner states, "Hansen teaches this limitation because it identifies the location of the configuration 
file, and the location could be on a local drive or on a network neighborhood, (see Hansen, column 5, 
lines 45-65) By doing that, Hansen determines whether the logical configuration links to a local 
database or a network database." 

Applicant respectfully disagrees. Applicant notes the Examiner asserts the teachings of Hansen 
disjunctively identify a location of a configuration file as being either on a local drive or on a network 
neighborhood. However, Applicant notes "determining whether the local interface and next neighbor 
information" is recited conjunctively. Therefore, Applicant submits the purported teachings alleged by 
the Examiner with respect to the Examiner's characterization (A) above fail to disclose the subject 
matter recited in the claims. 

With respect to the Examiner's characterization (B) above, the Examiner states, "Hansen 
leaches this limitation because the PCI slot 3, which is not connected or associated with any logical 
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configure, can be configured to be linked to a network device and configured according to device's 
information, (see Hansen, column 15, lines 40-60) By doing so, Hansen creates a new logical 
configuration on the PCI slot 3 when none existed before." The Examiner further states, "Hansen 
stores the new configured script in a memory subsystem, and the memory subsystem is a database for 
configuration scripts, (see Hansen, column 2, lines 40-45)." The Examiner also clarified confusion 
over the Examiner's statements concerning two different cited patents (U.S. Patents 6,772,204 and 
5,838,907) issued to inventors named Hansen. 

Applicant respectfully disagrees. While the Examiner asserted the teachings of Hansen 
disjunctively identified a location of a configuration file as being either on a local drive or on a 
> network neighborhood, such assertion of the purported teachings of Hansen also implies that Hansen 
fails to disclose "creating a new logical configuration link when the local interface and next neighbor 
'information is not associated with any of the logical configuration links in the logical link database... " 
Thus, Applicant submits the rejections based on the purported teachings alleged by the Examiner with 
respect to the Examiner's characterization (B) cannot properly be maintained. 

With respect to the Examiner's characterization (C) above, the Examiner stales, "Hansen 
teaches this limitation because the new PCI is configured with desired port number and port setting. 
The selection of port number and setting is a selection of number link configuration, (see Hansen, col. 
15, lines 40-45)." 

Applicant respectfully disagrees. Applicant notes "Hansen [understood to refer to U.S. Patent 
5.838,907], col. 1 5, lines 40-45)" states, "Specifically, for the Compaq router 122. PCI slot 1 has been 
used to provide a first ethernet connection 222, PCI slot 2, an HSSI connection 224 and PCI slot 4, a 
second ethernet 226. PCI slot 3, however, remains unconnected. From the backplane bitmap 220, the 
network administrator may view the settings for a port by double clicking on a selected port.. .." 
Applicant does not see the purported teaching of "the new PCI is configured with desired port number 
and port setting" in the cited portion of the cited reference. Thus, Applicant submits the rejections 
based on the purported teachings alleged by the Examiner with respect to the Examiner's 
characterization (C) cannot properly be maintained. 

Applicant notes Applicant has also presented arguments as to the Hansen reference failing to 
disclose "an unnumbered type," modifying a logical configuration link in the logical link database,' 
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"deleting a logical configuration link in the logical link database/' "a processing system coupled to the 
logical link database for accessing the logical link database," ". ..wherein the processing system 
determines local interface and next neighbor information for the network device/ "...wherein the 
processing system determines whether the local interface and next neighbor information is associated 
with one of the logical configuration links stored in the logical link database," "...wherein the 
processing system creates a new logical configuration link when the local interface and next neighbor 
information is not associated with any of the logical configuration links stored in the logical link 
database/' "...wherein the processing system causes the new logical configuration link to be stored in 
the logical link database/' " . wherein the processing system validates the new logical configuration 
link," and ". ..wherein the processing system causes the new logical configuration link to be sent to the 
network device." With respect to claims 5 and 6, Applicant has further presented arguments regarding 
.the allowability of claims 5 and 6. However, the Examiner appears to have limited the Examiner's 
Response to Arguments to the Examiner's characterizations (A), (B), and (C), but does not appear to 
have responded to the Applicant's other previously presented arguments, as noted above. Thus, 
Applicant continues to contend that claims for which such arguments have been advanced are in 
condition for allowance. 

The Examiner has rejected claims 1-4 and 7-16 under 35 U.S.C.§ 102(b) as being anticipated by 
Hansen (United States Patent No. 5,838,907). Applicant respectfully disagrees. 

Regarding claim I, Applicant has presented arguments for the allowability of claim I above in 
response to the Examiner's Response to Arguments. Therefore, Applicant submits claim I is in 
condition for allowance. 

Regarding claim 2, Applicant has presented arguments for the allowability of claim 2 above i n 
response to the Examiner's Response to Arguments. Therefore, Applicant submits claim 2 is in 
condition for allowance. 

Regarding claim 3, Applicant has presented arguments for the allowability of claim 3 above in 
response to the Examiner's Response to Arguments. Thus, Applicant submits claim 3 is also in 
condition for allowance. 
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Regarding claim 4, Applicant has presented arguments for the allowability of claim 4 above in 
response to the Examiner's Response to Arguments. Therefore, Applicant submits claim 4 is in 
condition for allowance. 

Regarding claim 7, Applicant has presented arguments for the allowability of claim 7 above in 
response to the Examiner's Response to Arguments. Thus, Applicant submits claim 7 is in condition 
for allowance. 

Regarding claim 8, Applicant has presented arguments for the allowability of claim 8 above in 
response to the Examiner's Response to Arguments. Thus, Applicant submits claim 8 is in condition 
for allowance. 

Regarding claim 9, Applicant has presented arguments for the allowability of claim 9 above in 
response to the Examiner's Response to Arguments. Thus, Applicant submits claim 9 is in condition 
for allowance. 

Regarding claim 10, Applicant has presented arguments for the allowability of claim 10 above 
in response to the Examiner s Response to Arguments. Thus, Applicant submits claim 10 is also in 
condition for allowance. 

Regarding claim 1 i, Applicant has presented arguments for the allowability of claim 1 1 above 
in response to the Examiner's Response to Arguments. Thus, Applicant submits claim I I is in 
condition for allowance. 

Regarding claim 12, Applicant has presented arguments for the allowability of claim 12 above 
in response to the Examiner's Response to Arguments. Thus, Applicant submits claim 12 is in 
condition for allowance. 

Regarding claim 13, Applicant has presented arguments for the allowability of claim 13 above 
in response to the Examiner's Response to Arguments. Therefore, Applicant submits claim 13 is in 
condition for allowance. 

Regarding claim 14, Applicant has presented arguments for the allowability of claim 14 above 
in response to the Examiner's Response to Arguments. Therefore, Applicant submits claim 14 is in 
condition for allowance. 
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Regarding claim 15> Applicant has presented arguments for the allowability of claim 15 above 
in response to the Examiner's Response to Arguments. Therefore, Applicant submits claim 15 is in 
condition for allowance. 

Regarding claim 16, Applicant has presented arguments for the allowability of claim 16 above 
in response to the Examiner's Response to Arguments. Therefore, Applicant submits claim 16 is in 
condition for allowance. 

The Examiner has rejected claim 5 under 35 U.S.G § 103(a) as allegedly being unpatentable 
over Hansen in view of Hansen (United States Patent No. 5,838,907), and further in view of Hard wick 
(United States Patent No. 5,550,816). Applicant respectfully disagrees. 

Regarding claim 5, Applicant has presented arguments for the allowability of claim 5 above in 
response to the Examiner's Response to Arguments. Thus, Applicant submits claim 5 is in condition 
for allowance. 

The Examiner has rejected claim 6 under 35 U.S.C. § 103(a) as allegedly being unpatentable 
over Hansen (United States Patent No. 5,838,907) in view of Chui (United States Patent No. 
2002/0165978). Applicant respectfully disagrees; 

Regarding claim 6, Applicant has presented arguments for the allowability of claim 6 above in 
response to the Examiner's Response to Arguments. Thus, Applicant submits claim 6 is in condition 
for allowance. 
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In conclusion, Applicant has overcome all of the Office's rejections, and early notice of 
allowance to this effect is earnestly solicited. If, for any reason, the Office is unable to allow the 
Application on the next Office Action, and believes a telephone interview would be helpful, the 
Examiner is respectfully requested to contact the undersigned attorney. 

Respectfully submitted, 





Ross D. Snyder, Reg. No. 37,730 

Attorney for Applicant(s) 

Ross D. Snyder & Associates, Inc. 

PO Box 164075 

Austin, Texas 78716-4075 

(512) 347-9223 (phone) 

(512) 347-9224 (fax) 
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DETAILED ACTION 

This action is responsive to communications: Amendment, filed on 4/26/07, 
Claims 1-18 arc pending in this application. Claims 1 and 9 arc independent claims. 

Claim Rejections - 35 USC§ 102 
The following is a quotation of the appropriate paragraphs of 35 U.S.C. J 02 that form the 
basis for the rejections under this section made in this Office action: 

A person shall be entitled to a. patent unless - 

(» the invention was pateniod or described in a printed publication in this or a foreign country or in public use or on 
sale in this country, more than one year prior to the date of application for patent, in the United States. 

Claims 1-4, and 7-18 arc rejected under 35 U.S.C. 102(b) as being anticipated by Hansen US 
Patent 5,838,907. 

As per claim 1, Hansen teaches a network administration method for provisioning logical 
configuration links for at least two network devices through a dedicated graphical user interface 
form, the method comprising: 

Selecting a network device having at least one network interface through the dedicated 
graphical user interface form; (figure 3b, column 15, lines 1 8-32; To configure a device, the 
device must be selected first) 

Determining local interface and next neighbor information for the network device; (figure 
7, items 1 14, 1 16, 120, 126, 122, 1 18, and 124) 

Determining whether the local interface and next neighbor information is associated with 
a logical configuration link stored among a plurality of logical configuration links in a logical 
link database; (column 5, lines 35-65; Subsystem is a logical link database) 
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Creating a new logical configuration link when the local interface and next neighbor 
information is not associated with any of the logical configuration links in the logical ink- 
databases; (column 15, lines 30-50; Unconnected PCI slot arc unassociatcd connection) 

Storing the new logical configuration link in the logical link database; (column 13, lines 

10-30) 

Validating the new logical configuration link; (column 13, lines 10-30) 

Sending the new logical configuration link to the network device; (column 14, lines 41- 

60) and 

Displaying a graphical representation of the new logical configuration link on a display 
device, (column 14, lines 41-60) 

As per claim 2, Hansen teaches the method of claim 1 . Hansen further teaches the step of 
creating a new logical configuration lik further comprises the steps of ; 

Selecting a like type: (column 13, lines 1-10; x. 25, frame relay, PPP and HDLC arc link 

types) 

Selecting a link numbering type for the new logical configuration link; (column 11, lines 
13-30; PCI slots are numbered configuration links) 

Selecting a link application for the new logical configuration link; (column 14, lines 5-25; 
The script commands arc applications; column 13, lines 65-column 14, lines 5) 

Selecting a sub layer interface type for the new logical configuration link; (column 14, 
lines 15-25; Connection identifiers are configuration links) 

Creating a first endpoint for the new logical configuration link; and 
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Creating a second endpoint for the new logical configuration link.(coIumn 13, lines 10- 



As per claim 3, Hansen teaches the method of claim 2, wherein the step of selecting the 
link type further comprises the step of: 

Selecting the link type from among a group consisting of: point-to-point, point-to-IP, and 
pint-to-subnet, (column 13, lines I- 10; x. 25, frame relay, PPP and HDLC) 

As per claim 4, Hansen teaches the method of claim 4, wherein the step of selecting the a 
link number type further comprises the step of: 

Selecting the link numbering type from a group consisting of: a numbered type and an 
un-number type, (column 1 1, lines 13-30; PCI slots arc numbering type, column 13, lines 28- 
45 ; a l ist of connection interface is un-number type) 

As per claim 7, Hansen teaches the method of claim 1 /Hansen further teaches the step of: 

Modifying a logical configuration link in the logical link databases, (column 11, lines 
4 1 -53; Editing is modifying) 

As per claim 8, Hansen teaches the method of claim 1, Hansen further teaches the step of: 
Deleting a logical configuration link in the logical link database, (column 10, lines 1-20) 
As per claim 9, it is of the same scope as claim 1. Supra. 

As per claim 10, Hansen teaches the apparatus of claim 9. Hansen teaches wherein the 
display device provides an ability to select a network device having at least one network 
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interface through the graphical user interface form, (figure 3b. column 15, lines 18-32; To 
configure a device, the device must be selected first) 

As per claim 1 1, Hansen teaches the apparatus of claim 9, Hansen further teaches the 
processing system determines local interface and next neighbor information for the network 
device, (figure 7, items 114, 116, 120, 126, 122, I I 8, and 124) 

As per c laim 12, Hansen teaches the apparatus of claim 1 1 , Hansen further teaches the 
processing system determines whether the local interface and next neighbor information is 
associated with one of the logical configuration, links stored in the logical link database, (column 
1 5, lines 30-50; Unconnected PCI slot arc unassociatcd connection) 

As per claim 13, Hansen teaches the apparatus of claim 12, Hansen further teaches 
creates a new logical configuration link when the local interface and next neighbor information is 
not associate with any of the logical configuration links stored in the logical link database, 
(column 13, lines 10-30) 

As per claim 14. Hansen teaches the apparatus of claim 13, Hansen further teaches the 
processing system causes the new logical configuration link to be stored in the logical link 
database, (column 13, lines 10-30) 

As per claim 15, Hansen teaches the apparatus of claim 14, Hansen further teaches the 
processing system validates the new logical configuration link, (column 13, lines 10-30) 

As per claim 16, Hansen teaches the apparatus of claim 15. Hansen further teaches the 
processing system cause the new logical configuration link to be sent to the network device, 
(column 14, lines 41-60) 



373 



Application/Control Number: 10/027,821 



Page 6 



Art Unit: 2174 

As per claim 17, it is rejected under the same rationale as claim 1 . Supra. 
As per claim 18. it is rejected under the same rationale as claim 2, Supra. 

Claim Rejections - 35 (JSC §103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 Of thus title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole woukthavc been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject inattcr pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

Claim 5 is rejected under 35 U.S.C. 1 03(a) as being unpatentable over Hansen in view of 
Hansen US Patent 5,838.907 in view of Hardvvick US Patent 5,550,816. 

As per claim 5, Hansen teaches the method of claim 2. Hansen fails to teach the step of 
selecting a link application from a group consisting of: 

Internet Protocol Forwarding. Multi-Protocol Label Switching and Internet Protocol 
Forwarding, and Multi-Protocol Label Switching. 

Hardwick teaches the step of selecting a link application from a group consisting of: 

Internet Protocol Forwarding, Multi-Protocol Label Switching and Internet Protocol 
Forwarding, and Multi-Protocol Label Switching, (column 43, lines 60- column 44, lines 5) 

It would have been obvious to an artisan at the time of the invention to include 
HardwicVs teaching with method of Hansen in order to provide a wide variety of access control 
tools that permit network managers to define the policy of how network group can interact 
within themselves. 
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Claims 6 is rejected under 35 U.S.C. 103(a) as being unpatentable over Hansen in view of 
Hansen US Patent 5,838,907 in view of Chui US Patent 2002/0165978. 

As per claim 6, Hansen teaches the method of claim 2, Hansen fails to teach selecting a 
sub layer interface type further comprises the step of: 

Selecting the sub-layer interface type from a group consisting of; Packet over Sonet, 
Asynchronous Transfer Mode, and GigEthcmct. 

Chui teaches selecting a sub layer interface type further comprises the step of ; 

Selecting the sub-layer interface type from a group consisting of; Packet over Sonet, 
Asynchronous Transfer Mode, and GigEthemct. (Paragraph 0201) 

It would have been obvious to an artisan at the time of the invention to include Chui's 
teaching with method of Hansen in order to provide a wide variety of access control tools that 
permit network managers to define the policy of how network group can interact within 



Applicant's arguments filed on 4/26/07 have been fully considered but they arc not 
persuasive. 

Applicant's argument focused on the following: 

A) Hansen fails to teach "determining whether the local interface and next neighbor 
information is associated with a logical configuration link stored among a plurality of logical 
configuration links in a logical link database." 

B) Hansen fails to teach "creating a new logical configuration link when the local 
interface and next neighbor information is not associated with any of the logical configuration 
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links in the logical link database and storing the new logical configuration link in the logical link 
database/* 

C) Hansen fails to teach "selecting a link numbering type for the new logical 
configuration link." 

Examiner disagrees. 

A) Hansen system relates to both the local interface and next neighbor information by 
using a map editor and a configuration which arc local interface (see Hansen col. 5, lines 35-45) 
and displaying on this interface information regarding neighboring network device, (sec Hansen 
col. 5, lines 55-65) 

B) Hansen teaches this limitation because the PCI slot 3, which is not connected or 
associated with any logical configure, can be configured to be linked to a network device and 
configured according to device's information, (sec Hansen, column 15 ,lincs 40-60) By doing 
so, Hansen creates a new logical configuration on the PCI slot 3 when none existed before. 
Furthermore, Hansen stores the newly configured script in a memory subsystem, and the 
memory subsystem is a database for configuration scripts, (sec Hansen, column 2 ,lines 40-45) 
Furthermore, upon completion, the new neighbor device information is displayed on the local 
interface, (see Hansen, col. 17, lines 40-col. 18, line 2) 

C) Hansen teaches this limitation because the new PCI is configured with desired port 
number and port setting, (sec Hansen, col. 15, lines 5-20) The new PCI is configured with new 
IP address for the specified port, (sec Hansen, figure 5, items 202; col. 13, lines 45-col. 14, lines 
40; the desired IP setting are set to the select port.) 
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Conclusion 

THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of time 
policy as set forth in 37 CFR 1, 136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within TWO 
MONTHS of the mailing date of this final action and the advisory action is not mailed until after 
the end of the THREE-MONTH shortened statutory period, then the shortened statutory period 
will expire on the date the advisory action is mailed, and any extension fee pursuant to 37 
CFR 1 . 1 36(a) will be calculated from the mailing date of the advisory action. In no event, 
however, will the statutory period for reply expire later than SIX MONTHS from the mailing 
date of this final action. 

Contact Information 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Peng Kc whose telephone number is (571) 272-4062. The 
examiner can normally be reached on M-Th and Alternate Fridays 8:30-5:00. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Kristitic L. Kincaid can be reached on (57 1) 272-4063. The fax phone number for 
the organization where this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from cither Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-dircctuspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (BBC) at 866-217-9197 (toll-free). If you would 
like assistance from a USPTO Customer Service Representative or access to the automated 
information system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

Peng Kc 
/Peng Ke/ 

Primary Examiner, Art Unit 2174 
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Dear Sir: 

In response to the Office action of May 16, 2008, Applicant submits the following response: 
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In the Claims: 

1 . (Original) A network administration method for provisioning logical configuration 
links for at least two network devices through a dedicated graphical user interface form, the 
method comprising: 

5 selecting a network device having at least one network interface through the dedicated 

graphical user interface form; 

determining local interface and next neighbor information for the network device; 
determining whether the local interface and next neighbor information is associated with 
a logical configuration link stored among a plurality of logical configuration links in a logical 
10 link database; 

creating a new logical configuration link when the local interface and next neighbor 
information is not associated with any of the logical configuration links in the logical link 
database; 

storing the new logical configuration link in the logical link database; 
15 validating the new logical configuration link; 

sending the new logical configuration link to the network device; and 

displaying a graphical representation of the new logical configuration link on a display 

device. 

20 2. (Original) The method of claim 1 , wherein the step of creating a new logical 
configuration link further comprises the steps of: 
selecting a link type; 

selecting a link numbering type for the new logical configuration link; 
selecting a link application for the new logical configuration link; 
25 selecting a sub layer interface type for the new logical configuration link; 

creating a first endpoint for the new logical configuration link; and 
creating a second endpoint for the new logical configuration link. 
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3. (Original) The method of claim 2, wherein the step of selecting the link type further 
comprises the step of: 

selecting the link type from among a group consisting of: point-to-point, point-to-FP, and 
point-to-subnet. 

4. (Original) The method of claim 2, wherein the step of selecting a link numbering 
type further comprises the step of: 

selecting the link numbering type from a group consisting of: a numbered type and an 
unnumbered type. 

5. (Original) The method of claim 2, wherein the step of selecting a link application 
further comprises the step of: 

selecting the link application from a group consisting of: Internet Protocol Forwarding, 
Multi-Protocol Label Switching and Internet Protocol Forwarding, and Multi -Protocol Label 
Switching. 

6. (Original) The method of claim 2, wherein the step of selecting a sub layer interface 
type further compri ses the step of: 

selecting the sub layer interface type from a group consisting of: Packet Over Sonet, 
Asynchronous Transfer Mode, and GigEthemet. 

?. (Original) The method of claim 1 , further comprising the step of: 
modifying a logical configuration link in the logical Jink database. 

8. (Original) The method of claim 1 , further comprising the step of: 
deleting a logical configuration link in the logical link database. 

9. (Original) Apparatus for provisioning logical configuration links comprising: 
a logical link database for storing logical configuration links; 

a processing system coupled to the logical link database for accessing the logical link 
database; and 
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a display device coupled to the processing system for displaying a graphical user 
interface form comprising a graphical representation of a logical configuration link. 

10. (Original) The apparatus of claim 9 wherein the display device provides an ability to 
select a network device having at least one network interface through the graphical user interface 
form. 

1 1 . (Original) The apparatus of claim 9 wherein the processing system determines local 
interface and next neighbor information for the network device. 

12. (Original) The apparatus of claim 1 1 wherein the processing system determines 
whether the local interface and next neighbor information is associated with one of the logical 
configuration links stored in the logical link database. 

1 3. (Original) The apparatus of claim 1 2 wherein the processing system creates a new 
logical configuration link when the local interface and next neighbor information is not 
associated with any of the logical configuration links stored in the logical link database. 

14. (Original) The apparatus of claim 13 wherein the processing system causes the new 
logical configuration link to be stored in the logical link database. 

1 5. (Original) The apparatus of claim 1 4 wherein the processing system validates the 
new logical configuration link. 

1 6. (Original) The apparatus of claim 1 5 wherein the processing system causes the new 
logical configuration link to be sent to the network device. 

17. (Previously Presented) The method of claim 1 wherein creating the new logical 
configuration link when the local interface and next neighbor information is not associated with 
any of the logical configuration links in the logical link database occurs based on interfaces 
information entered by a user. 
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1 8. (Previously Presented) 



A method comprising: 



selecting a link type; 
selecting a link numbering type; 
selecting a link application; 
selecting a sub layer interface type; 
creating a first endpoint; 
creating a second endpoint; 

populating form panels with the link type, the link numbering type, the link application, 
and the sub layer interface type; 

receiving user input of interfaces information; 
validating the interfaces information; 

creating a link in accordance with the interfaces information; and 
provisioning the link. 
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REMARKS/ARGUMENTS 

Claims 1-18 are pending in the application. The Examiner has rejected claims 1-18. Applicant 
respectfully requests reconsideration of pending claims 1-18. 

The Examiner has rejected claims 1-4 and 7-16 under 35 U.S.C. § 102(b) as being anticipated 
by Hansen (United States Patent No. 5,838,907). Applicant respectfully disagrees. 

Regarding claim 1, Applicant submits the cited portions of the cited reference fail to disclose 
the subject matter of claim 1. Asanexample, Applicant submits the cited portions of the cited 
reference fail to disclose "determining local interface and next neighbor information for the network 
device." The Examiner cites "(figure 7, items 114, 1 16, 120, 126, 122, 1 1 8, and 124)" of the Hansen 
reference as allegedly disclosing such feature. However, Applicant notes Figure 7 of the Hansen 
reference merely purports to be an illustration of a configuration manager GUI, but does not appear to 
disclose any method steps. 

As another example, Applicant submits the cited portions of the cited reference fail to disclose 
"determining whether the local interface and next neighbor information is associated with a logical 
configuration link stored among a plurality of logical configuration links in a logical link database." 
While the Examiner cites "(column 5, lines 35-64; Subsystem is a logical link database)," Applicant 
notes the cited portion of the cited reference states, "The data and programming instruction are stored 
in the memory subsystem 6..." Applicant sees no teaching as to "determining whether the local 
interface and next neighbor information is associated with a logical configuration link stored among a 
plurality of logical configuration links in a logical link database." 

As yet another example, Applicant submits the cited portions of the cited reference fail to 
disclose "creating a new logical configuration link when the local interface and next neighbor 
information is not associated with any of the logical configuration links in the logical link database." 
While the Examiner cites "(column 15, lines 30-50; Unconnected PCI slot are unassociated 
connection), Applicant notes col. 1 5, lines 33-39, state, "As may now be seen, the various network 
entities, as well as unconnected connection interfaces, are graphically displayed on the backplane 
bitmap 220 using information contained in the bitmap section 36 of the configuration script 12-N and 
the local configuration file 20 for the Compaq router 122." However, col. 5, lines 49-52, as the 
Examiner cited in alleging "Subsystem is a logical link database," states "If a particular network device 
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does not have a configuration script, a configuration file cannot be constructed by the network device 
configuration tool 10." Accordingly, Applicant submits the Examinees apparent interpretation of the 
teachings of the prior art would appear to render them inoperable. Thus, Applicant submits the cited 
portions of the cited reference cannot disclose the subject matter recited in claim 1. 

As yet another example, Applicant submits the cited portions of the cited reference fail to 
disclose "storing the new logical configuration link in the logical link database." While the Examinuer 
cites "(column 1 3, lines 10-30)," Applicant submits col. 13, lines 22-26. state, "If either the origination 
or destination device or entity do not have an available slot which is connectable to the other device or 
entity, a determination is made at step 156 that the devices/entities cannot be connected." Applicant 
submits the cited portion of the cited reference fails to disclose "storing the new logical configuration 
link in the logical link database." 

As a further example, Applicant submits the cited portions of the cited reference fail to disclose 
"sending the new logical configuration link to the network device." While the Examiner cites 
"(column 14, lines 41 -60)," Applicant notes col. 1 4, lines 48-50, states \ . .before saving the 
constructed local configuration file 20 to the memory subsystem and associating it with the device." 
Applicant submits the cited portion of the cited reference does not appear to disclose "sending the new 
logical configuration link to the network device." Therefore, Applicant submits claim 1 is in condition 
for allowance. 

Regarding claim 2, Applicant submits the cited portions of the cited reference fail to disclose 
"selecting a link type." While the Examiner cites "(column 13, lines 1-10; x,25, frame relay, PPP and 
HDLC are link types," Applicant submits the Examiner has alleged, with respect to claim 1, from 
which claim 2 depends, that "Subsystem is a logical link database." Applicant submits the Examiner 
doesn't provide any evidence that "Subsystem" includes any information pertaining to "frame relay, 
PPP and HDLC." Thus, Applicant submits the Examinees apparent interpretation of the teachings of 
the prior art would appear to render them inoperable. 

As another example, Applicant submits the cited portions of the cited reference fail to disclose 
"selecting a link numbering type for the new logical configuration link." While the Examiner alleges 
"(column 1 1 , lines 1 3-30; PCI slots are numbered configuration links)," Applicant submits such 
allegation does not disclose a step of "selecting a link numbering type...." 
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As a further example, Applicant submits the cited portions of the cited reference fail to disclose 
"selecting a link application for the new logical configuration link." While the Examiner alleges 
"(column 14, lines 5-25; The script commands are applications; column 13, lines 65-column 14, lines 
5)," Applicant notes the Examiner alleged with respect to "creating a new logical configuration link. .." 
of claim I, from which claim 2 depends, "Unconnected PCI slot are unassociated connection." While 
the Examiner alleges "The script commands are applications," Applicant sees no allegation by the 
Examiner that "the script commands" are disclose link applications for "unconnected PCI slot," which 
the Examiner appears to allege disclose "the new logical configuration link." Thus, Applicant submits 
the Examiner's allegations appear to be inconsistent and would render the purported teachings of the 
cited reference inoperable. 

As yet another example, Applicant submits the cited portions of the cited reference fail to 
disclose "selecting a sub layer interface type for the new logical configuration link." While the 
Examiner cites "(column 14, lines 1 5-25; Connection identifiers are configuration links)," Applicant 
notes the Examiner al leged, with respect to "creating a new logical con figuration link" of claim 1 , from 
which claim 2 depends, "Unconnected PCI slot are unassociated connection." Thus, Applicant submits 
"connection identifiers are configuration links" is inconsistent with the purported teachings alleged by 
the Examiner with respect to claim I, thereby apparently rendering such teachings inoperable. 
Moreover, Applicant submits "connection identifiers are configuration links" fails to disclose 
"selecting a sub layer interface type. ..." 

As yet another example, Applicant submits the cited portions of the cited reference fail to 
disclose "creating a first endpoint for the new logical configuration link" and "creating a second 
endpoint for the new logical configuration link." While the Examiner cites "(column 13, lines 10-30)," 
Applicant submits col. 13, lines 22-26, state, "If either the origination or destination device or entity do 
not have an available slot which is connectable to the other device or entity, a determination is made at 
step 1 56 that the devices/entities cannot be connected." Applicant submits the cited portion of the 
cited reference fails to disclose "creating a first endpoint for the new logical configuration link" and 
"creating a second endpoint for the new logical configuration link." Therefore, Applicant submits 
claim 2 is in condition for allowance. 

Regarding claim 3, Applicant submits fails to disclose "selecting the link type from among a 
group consisting of: point-to-point, point-to-IP, and point-to-subnet." While the Examiner cites 
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"(column 13, lines 1-10; x.25, frame relay, PPP and HDLC)," Applicant notes the inconsistency 
Applicant alleges with respect to the Examiner's allegations regarding "selecting a link type" in claim 
2, from which claim 3 depends. Thus, Applicant submits the Examiner's allegations with respect to 
claim 3 also render the Examiner's apparent interpretation of the purported teachings of the cited 
portions of the cited reference inoperable. Therefore, Applicant submits claim 3 is also in condition 
for allowance. 

Regarding claim 4, Applicant submits the cited portions of the cited reference fail to disclose 
"selecting the link numbering type from a group consisting of: a numbered type and an unnumbered 
type." While the Examiner cites "column 1 1, lines 13-30; PCI slots are numbering type, column 13, 
lines 28-45; a list of connection interface is un-number type)," Applicant notes the inconsistency 
Applicant alleges with respect to the Examiner's allegations regarding "selecting a link numbering 
type..." in claim 2, from which claim 4 depends. Thus, Applicant submits the Examiner's allegations 
with respect to claim 4 also render the Examiner's apparent interpretation of the purported teachings of 
the cited portions of the cited reference inoperable. Therefore, Applicant submits claim 4 is in 
condition for allowance. 

Regarding claim 7, Applicant submits the cited portions of the cited reference fail to disclose 
"modifying a logical configuration link in the logical link database." While the Examiner cites 
"(column 1 1 , lines 41-53; Editing is modifying)," Applicant notes the Examiner alleged "Unconnected 
PCI arc unassociated connection" as purportedly teaching "creating a new logical configuration link..." 
in claim 1, from which claim 7 depends. Applicant sees no reference to such "unconnected PCI" in 
"(column 11, lines 41-53; Editing is modifying)," as alleged by the Examiner. Thus, Applicant submits 
the cited portions of the cited reference fail to disclose the subject matter of claim 7. Therefore, 
Applicant submits claim 7 is in condition for allowance. 

Regarding claim 8, Applicant submits the cited portions of the cited reference fail to disclose 
"deleting a logical configuration link in the logical link database." While the Examiner cites "(column 
10, lines 1-20)," Applicant notes the Examiner alleged "Unconnected PCI are unassociated connection" 
as purportedly teaching "creating a new logical configuration link..." in claim 1, from which claim 8 
depends. Applicant sees no reference to such "unconnected PCI" in "(column 10, lines 1-20)," as 
alleged by the Examiner. Moreover, Applicant submits teachings in "(column 10, lines 1-20)" appear 
to be inconsistent with "unconnected PCI." For example, "telnet to this device," "view ip addresses," 
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and "view ipx addresses" appear to be inconsistent with "unconnected PCi," as cited by the Examiner 
with respect to claim 1, from which claim 8 depends. Thus, Applicant submits the cited portions of the 
ci ted reference fail to disclose the subject matter of claim 8. Therefore, Applicant submits claim 8 is in 
condition for allowance. 

Regarding claim 9, Applicant notes the Examiner states "As per claim 9, it is of the same scope 
as claim !. Supra." Applicant respectfully disagrees and notes claim 9 is directed to different subject 
matter than claim I. However, to the extent the Examiner relies on the Examiner's rejection of claim 1 
to also reject claim 9, Applicant reiterates what Applicant alleges to be the deficiencies of the 
Examiner's rejection of claim 1, as Applicant discussed above. Therefor Applicant submits claim 9 is 
in condition for allowance. 

Regarding claim 1 0, Applicant has presented arguments for the allowability of claim 9, from 
which claim 10 depends. Therefore, Applicant submits claim 10 is also in condition for allowance. 

Regarding claim 11, Applicant submits the cited portions of the cited reference fail to disclose 
"wherein the processing system determines local interface and next neighbor information for the 
network device." While the Examiner cites "(figure 7, items 114, 116, 120, 126, 122, 118, and 124), 
Applicant submits Figure 7 of the Hansen reference merely purports to be an illustration of a 
configuration manager GUI, but does not appear to disclose "wherein the processing system 
determines local interface and next neighbor information for the network device." Therefore, 
Applicant submits claim 1 1 is in condition for allowance. 

Regarding claim 12, Applicant submits the cited portions of the cited reference fail to disclose 
"wherein the processing system determines whether the local interface and next neighbor information 
is associated with one of the logical configuration links stored in the logical link database." While the 
Examiner cites "(column 1 5, lines 30-50; Unconnected PCI slot are unassociated connection)," 
Applicant submits the "Unconnected PCI slot are unassociated connection" alleged by the Examiner 
fails to disclose, for example, "next neighbor information" and "the logical link database." Thus, 
Applicant submits the Examiner has not made a prima facie showing of anticipation with respect to the 
subject matter of claim 12. Therefore, Applicant submits claim 12 is in condition for allowance. 
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Regarding claim 1 3, Applicant submits the cited portions of the cited reference fail to disclose 
"wherein the processing system creates a new logical configuration link when the local interface and 
next neighbor information is not associated with any of the logical configuration links stored in the 
logical link database," While the Examiner cites "(column 13, lines 1 0-30)," Applicant submits col. 
13, lines 22-26, state, "If either the origination or destination device or entity do not have an available 
slot which is connectable to the other device or entity, a determination is made at step 1 56 that the 
devices/entities cannot be connected." Applicant submits the cited portion of the cited reference fails 
to disclose "wherein the processing system creates a new logical configuration link when the local 
interface and next neighbor information is not associated with any of the logical configuration links 
stored in the logical link database." Therefore, Applicant submits claim 13 is in condition for 
allowance. 

Regarding claim 14, Applicant submits the cited portions of the cited reference fail to disclose 
"wherein the processing system causes the new logical con figuration link to be stored in the logical 
link database." While the Examiner cites "(column 13, lines 10-30),!- Applicant submits col. 13, lines 
22-26, state, "If either the origination or destination device or entity do not have an available slot 
which is connectable to the other device or entity, a determination is made at step 156 that the 
devices/entities cannot be connected." Applicant submits the cited portion of the cited reference fai ls 
to disclose "wherein the processing system causes the new logical configuration link to be stored in the 
logical link database." Therefore, Applicant submits claim 14 is in condition for allowance. 

Regarding claim 15, Applicant has presented arguments for the allowability of claim 9, from 
which claim 15 indirectly depends. Therefore, Applicant submits claim 15 is in condition for 
allowance. 

Regarding claim 16, Applicant submits the cited portions of the cited reference fail to di sclose 
"wherein the processing system causes the new logical configuration link to be sent to the network 
device." While the Examiner cites "(column 14, lines 41-60)," Applicant notes col. 14, lines 48-50, 
states \ ..before saving the constructed local configuration file 20 to the memory subsystem and 
associating it with the device." Applicant submits the cited portion of the cited reference does not 
appear to disclose "wherein the processing system causes the new logical configuration link to be sent 
to the network device." Therefore, Applicant submits claim 16 is in condition for allowance. 
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Regarding claim 17, Applicant submits the cited portions of the cited reference fail to disclose 
"wherein creating the new logical configuration link when the local interface and next neighbor 
information is not associated with any of the logical configuration links in the logical link database 
occurs based on interfaces information entered by a user. " The Examiner states "As per claim 1 7, it is 
rejected under the same rationale as claim 1. Supra." Applicant respectfully disagrees and notes claim 
1 7 is directed to different subject matter than claim I . However, to the extent the Examiner relies on 
the Examiner's rejection of claim 1 to also reject claim 17, Applicant reiterates what Applicant alleges 
to be the deficiencies of the Examiner's rejection of claim i, as Applicant discussed above. Therefore, 
Applicant submits claim 1 7 is in condition for allowance. 

Regarding claim 18, Applicant submits the cited portions of the cited reference fail to disclose 
the subject matter recited in claim 1 8. Applicant notes the Examiner states "As per claim 18, it is 
rejected under the same rationale as claim 2." Applicant respectfully disagrees and notes claim 18 is 
directed to different subject matter than claim 2. To the extent the Examiner relies on the Examiner's 
rejection of claim 2 to also reject claim 18, Applicant reiterates what Applicant alleges to be the 
deficiencies of the Examiner's rejection of claim 2, as Applicant discussed above. Nonetheless, 
Applicant submits the Examiner has not alleged anticipation with respect to subject matter recited in 
claim 18. As one example, Applicant submits claim 18 recites "populating form panels with the link 
type, the link numbering type, the link application, and the sub layer interface type," while claim 2 
does not. As another example, Applicant submits claim 18 recites "receiving user input of interfaces 
information." As yet another example, Applicant submits claim 1 8 recites "validating the interfaces 
information." As a further example, Applicant submits claim 18 recites "creating a link in accordance 
with the interfaces information." As another example, Applicant submits claim 1 8 recites 
"provisioning the link." Applicant submits the Examiner has not alleged any teaching as to such 
subject matter. Thus, Applicant submits the Examiner has not made a prima facie showing of 
anticipation with respect to claim 18. Therefore, Applicant submits claim 18 is in condition for 
allowance. 

The Examiner has rejected claim 5 under 35 U.S.C. § 103(a) as allegedly being unpatentable 
over Hansen in view of Hansen (United States Patent No. 5,838,907), and further in view of Hardwick 
(United States Patent No. 5,550,8 1 6). Applicant respectfully disagrees. 
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Regarding claim 5, Applicant submits the cited portions of the cited reference fail to render 
unpatentable the subject matter of claim 5. As an example, Applicant submits the cited portions of the 
cited reference fail to disclose or suggest "selecting the link application from a group consisting of: 
Internet Protocol Forwarding, Multi -Protocol Label Switching and Internet Protocol Forwarding, and 
Multi-Protocol Label Switching." Applicant notes the Examiner alleges, with respect to claim 2, from 
which claim 5 depends, "The script commands are applications," However, the Examiner now alleges 
"Hardwick teaches the step of selecting a link application from a group consisting of: Internet Protocol 
Forwarding, Multi -Protocol Label Switching and Internet Protocol Forwarding, and Multi-Protocol 
Label Switching (column 43, lines 60-column 44, lines 5)." Applicant submits the Examiner's 
allegations as to purported teachings of the cited references with respect to the subject matter of claims 
2 and 5 are inconsistent and contradictory, thereby rendering the supposed combination of the 
purported teachings inoperable. Moreover, Applicant submits the Examiner's alleged motivation to 
combine the references does not appear to pertain to the supposed combination of the purported 
teachings. Thus, Applicant submits the Examiner has not made a prima facie showing of obviousness 
with respect to the subject matter of claim 5. Therefore, Applicant submits claim 5 is in condition for 
allowance. 

The Examiner has rejected claim 6 under 35 U.S.C. § 103(a) as allegedly being unpatentable 
over Hansen in view of Hansen (United States Patent No. 5,838,907) in view of Chui (United States 
Patent No. 2002/01 65978). Applicant respectfully disagrees. 

Regarding claim 6, Applicant submits the cited portions of the cited reference fail to render 
unpatentable the subject matter of claim 6. As an example, Applicant submits the cited portions of the 
cited reference fail to disclose or suggest "selecting the sub layer interface type from a group consisting 
of: Packet Over Sonet, Asynchronous Transfer Mode, and GigEthernet." Applicant notes the 
Examiner alleges, with respect to claim 2, from which claim 6 depends, "Connection identifiers are 
configuration links." However, the Examiner now alleges "Chui teaches selecting a sub layer interface 
type comprises the step of: Selecting the sub-layer interface type from a group consisting of: Packet 
over Sonet, Asynchronous Transfer Mode, and GigEthernet." Applicant submits the Examiner's 
allegations as to purported teachings of the cited references with respect to the subject matter of claims 
2 and 6 are inconsistent and contradictory, thereby rendering the supposed combination of the 
purported teachings inoperable. Moreover, Applicant submits the Examiner's alleged motivation to 
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combine the references does not appear to pertain to the supposed combination of the purported 
teachings. Thus, Applicant submits the Examiner has not made a prima facie showing of obviousness 
with respect to the subject matter of claim 6. Therefore, Applicant submits claim 6 is in condition for 
allowance. 

in conclusion, Applicant has overcome all of the Office's rejections, and early notice of 
allowance to this effect is earnestly solicited. If, for any reason, the Office is unable to allow the 
Application on the next Office Action, and believes a telephone interview would be helpful, the 
Examiner is respectfully requested to contact the undersigned attorney. 

Respectfully submitted, 



Date 




Ross D. Snyder, Reg. No. 37,730 
Attorney for Applicant(s) 
Ross D. Snyder & Associates, Inc. 
POBox 164075 
Austin, Texas 78716-4075 
(512) 347-9223 (phone) 
(512)347-9224 (fax) 
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DETAILED ACTION 



This action is responsive to communications: Amendment, filed on 1 1/20/08. 



Claims 1-18 arc pending in this application. Claims I and 9 are independent claims. 



Claim Rejections - 35 USC§ 102 



The following is a quotation of the appropriate paragraphs of 35 U.S.C. 1 02 that form the 
basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless ~ 

(h) the invention was patented or described in a printed publication hi this or a foreign country or in public use or on 
sale in this country, more them one year prior to the date of application for patent hi the United Stales. 

Claims 1-4, and 7-18 arc rejected under 35 U.S.C. 102(b) as being anticipated by Hansen US 
Patent 5,838,907. 

As per claim 1, Hansen teaches a network administration method for provisioning logical 
configuration links for at least two network devices through a dedicated graphical user interface 
form, the method comprising: 

Selecting a network device having at least one network interface through the dedicated 
graphical user interface form; (figure 3b, column 15, lines 18-32; To configure a device, the 
device must be selected first) 

Determining local interface and next neighbor information for the network device; (figure 
7, items 1 14, 116, 120, 126, 122, 118, and 124) 

Determining whether the local interface and next neighbor information is associated with 
a logical configuration link stored among a plurality of logical configuration links in a logical 
link database: (column 5, lines 35-65; Subsystem is a logical link database) 




Application/Control Number: 1 0/027,82 1 Page 3 

Art Unit: 2174 

Creating a new togical configuration link when the local interface and next neighbor 
information is not associated with any of the logical configuration links in the logical ink 
databases; (column 15, lines 30-50; Unconnected PCI slot arc unassociatcd connection) 

Storing the new logical configuration link in the logical link database: (column 1 3, lines 

10-30) 

Validating the new logical configuration link; (column 13, lines 10-30) 

Sending the new logical configuration link to the network device; (column 1.4, lines 41- 

60) and 

Displaying a graphical representation of the new logical configuration link on a display 
device, (column 14, lines 41-60) 

As per claim 2, Hansen teaches the method of claim I . Hansen further teaches the step of 
creating a new logical configuration lik further comprises the steps of ; 

Selecting a like type; (column 1 3, lines 1-10; x. 25, frame relay, PPP and HDLC arc link 

types) 

Selecting a link numbering type for the new logical configuration link; (column I I, lines 
13-30; PCI slots arc numbered configuration links) 

Selecting a link application for the new logical configuration link; (column 14, lines 5-25; 
The script commands arc applications; column 13, lines 65-column 14, lines 5) 

Selecting a sub layer interface type for the new logical configuration link; (column 14, 
lines 15-25: Connection identifiers are configuration links) 

Creating a first endpoinl for the new logical configuration link; and 
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Creating a second endpoint for the new logical configuration link.(column 1 3. lines 10- 

30) 

As per claim 3, Hansen teaches the method of claim 2, wherein the step of selecting the 
link type further comprises the step of: 

Selecting the link type from among a group consisting of: point-to-point, point-to-IP, and 
pint-to-subnet, (column 13, lines 1-10; x. 25, frame relay, PPP and HDLC) 

As per claim 4, Hansen teaches the method of claim 4, wherein the step of selecting the a 
link number type further comprises the step of: 

Selecting the link numbering type from a group consisting of: a numbered type and an 
un~numbcr type, (column 11, lines 13-30; PCI slots arc numbering type, column 13, lines 28- 
45; a list of connection interface is un-numbcr type) 

As per claim 7, Hansen teaches the method of claim 1, Hansen further teaches the step of: 

Modifying a logical configuration link in the logical link databases, (column 11. lines 
41-53; Editing is modifying) 

As per claim 8, Hansen teaches the method of claim 1 . Hansen further teaches the step of: 
Deleting a logical configuration link in the logical link database, (column 10, lines 1-20) 
As per claim 9, it is of the same scope as claim 1 . Supra. 

As per claim 10, Hansen teaches the apparatus of claim 9. Hansen teaches wherein the 
display device provides an ability to select a network device having at least one network 
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interface through the graphical user interface form, (figure 3b, column 15, lines 18-32; To 
configure a device, the device must be selected first) 

As per claim 1 1, Hansen teaches the apparatus of claim 9, Hansen further teaches the 
processing system determines local interface and next neighbor information for the network 
device, (figure 7, items 1 14, 116, 120, 126, 122, 118, and 124) 

As per claim 1 2, Hansen teaches the apparatus of claim 1 1, Hansen further teaches the 
processing system determines whether the local interface and next neighbor information is 
associated with one of the logical configuration links stored in the logical link database, (column 
15, lines 30-50; Unconnected PCI slot arc unassociatcd connection) 

As per claim 13, Hansen teaches the apparatus of claim 12, Hansen further teaches 
creates a new logical configuration link when the local interface and next neighbor information is 
not associate with any of the logical configuration links stored in the logical link database, 
(column 13, lines 10-30) 

As per claim 14, Hansen teaches the apparatus of claim 13, Hansen further teaches the 
processing system causes the new logical configuration link to be stored in the logical link 
database, (column 13, lines 10-30) 

As per claim 15, Hansen teaches the apparatus of claim 14, Hansen further teaches the 
processing system validates the new logical configuration link, (column 13, lines 10-30) 

As per claim 16, Hansen teaches the apparatus of claim 15, Hansen further teaches the 
processing system cause the new logical configuration link to be sent to the network device, 
(column 14, lines 41-60) 
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As per claim 17, it is rejected under the same rationale as claim 1 . Supra. 



As per claim 1 8, it is rejected under the same rationale as claim 2. Supra. 



Claim Rejections - 35 USC§ 103 



The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A pa lew may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if die dilTcrences between the subject matter sought to be patented and the prior art are 
such thai the subject matter as a whole would have been obvious at the time the invention was made lo a person 
having ordinary skill in the art to- which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

Claim 5 is rejected under 35 U.S.C. 103(a) as being unpatentable over Hansen in view of 

Hansen US Patent 5,838,907 in view of Hardwick US Patent 5,550,816. 

As per claim 5, Hansen teaches the method of claim 2. Hansen fails to teach the step of 
selecting a link application from a group consisting of: 

Internet Protocol Forwarding, Multi-Protocol Label Switching and Internet Protocol 
Forwarding, and Multi-Protocol Label Switching. 

Hardwick teaches the step of selecting a link application from a group consisting of: 

Internet Protocol Forwarding. Multi-Protocol Label Switching and Internet Protocol 
Forwarding, and Multi- Protocol Label Switching, (column .43, lines 60- column 44, lines 5) 

It would have been obvious to an artisan at the time of the invention to include 
Hardwick's teaching with method of Hansen in order to provide a wide variety of access control 
tools that permit network managers to define the policy of how network group can interact 
within themselves. 
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Claims 6 is rejected under 35 U.S.C. 103(a) as being unpatentable over Hansen in view of 
Hansen US Patent 5,838,907 in vicwofChui US Patent 2002/0 1 65978. 

As per claim 6, Hansen teaches the method of claim 2, Hansen fails to teach selecting a 
sub layer interface type further comprises the step of : 

Selecting the sub-layer interface type from a group consisting of; Packet over Sonet, 
Asynchronous Transfer Mode, and GigEthcrnct. 

Chui teaches selecting a sub layer interface type further comprises the step of : 

Selecting the sub-layer interface type from a group consisting of; Packet over Sonet, 
Asynchronous Transfer Mode, and GigEthcrnct. (Paragraph 0201 ) 

It would have been obvious to an artisan at the time of the invention to include Churs 
teaching with method of Hansen in order to provide a wide variety of access control tools that 
permit network managers to define the policy of how network group can interact within 
themselves. 



Applicant's arguments filed on 1 1/20/08 have been fully considered but they are not 
persuasive. 

Applicant's argument focused on the following: 

A) Hansen fails to teach "determining whether the local interface and next neighbor 
information is associated with a logical configuration link stored among a plurality of logical 
configuration links in a logical link database." 



Response to Argument 
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A ) Hansen system relates to both the local interface and next neighbor information by 
using a map editor and a configuration which arc local interface (see Hansen col. 5, lines 35-45) 
and displaying on this interface information regarding neighboring network device, (sec Hansen 
col 5, lines 55-65) 

B) Hansen fails to teach "creating a new logical configuration link when the local 
interface and next neighbor information is not associated with any of the logical configuration 
links in the logical link database and storing the new logical configuration link in the logical link 
database." 

B) Hansen teaches this limitation because the PCI slot 3, which is not connected or 
associated with any logical configure, can be configured to be linked to a network device and 
configured according to device's information, (sec Hansen, column 15 Jincs 40-60) By doing 
so, Hansen creates a new logical configuration on the PCI slot 3 when none existed before. 
Furthermore, Hansen stores the newly configured script in a memory subsystem, and the 
memory subsystem is a database for configuration scripts, (sec Hansen, column 2 Jincs 40-45) 
Furthermore, upon completion, the new neighbor device information is displayed on the local 
interface, (sec Hansen, col. 17, lines 40-col. 18, line 2) 

C) Hansen fails to teach "selecting a link numbering type for the new logical 
configuration link." 

C) Hansen teaches this limitation because the new PCI is configured with desired port 
number and port setting, (sec Hansen, col. 15, lines 5-20) The new PCI is configured with new 
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IP address for the specified port, (see Hansen, figure 5, items 202; col. 13, lines 45-coL 14, lines 
40; the desired IP setting arc set to the select port.) 



THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of time 
policy as set forth in 37 CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within TWO 
MONTHS of the mailing date of this final action and the advisory action is not mailed until after 
the end of the THREE-MONTH shortened statutory period, then the shortened statutory period 
will expire on the date the advisory action is mailed, and any extension fee pursuant to 37 
CFR 1.136(a) will be calculated from the mailing date of the advisory action. In no event, 
however, will the statutory period for reply expire later than SIX MONTHS from the mailing 
date of th is final action. 



Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to SIMON KE whose telephone number is (57 1)272-4062. The 
examiner can normally be reached on M-Th and Alternate Fridays 8:30-5:00. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Stephen S. Hong can be reached on (571) 272-4124. The fax phone number for the 
organization where this application or proceeding is assigned is 57I-273r8300. 



Conclusion 



Contact Information 
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Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from cither Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-dircct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-21 7-9197 (toll-free). If you would 
like assistance from a USPTO Customer Service Representative or access to the automated 
information system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 
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PATENT 

L *^ 8] IN THE UNITED STATES PATENT AND TRADEMARK OFFICE 

2$pi$^nt(s): Denis Proulx, et al. 
Title: METHOD AND SYSTEM FOR IP LINK MANAGEMENT 
App.No.: 10/027,821 Filed: 12-19-2001 

Examiner: ;v: iKLe»-.Peng ;■. . . ... Group Art Unit: :2174 

Atty. bkt: No.- f 466! 1 3 74890 .'"i 

Commissioner 'for Patents 

POiBox 1450: • . - \, . » .. 4 /.V • . 
AtexanpViiyA 22313-1450 

PRE- APPEAL BRIEF REQUEST FOR REVIEW 

Dear Sir: ."/■■; 

Claims I 8 are pending in the application The Examiner has rejected claims 1-18. Appellant 
respectfully requests, reconsideration of pending claims 1 -1 8. Appellant tiles herewith a notice of appeal. , 
Pursuant to the "New Pre-Appeal Brief Conference Pilot Program," 1296 Off. Gaz. Pat. Office 67 (July 12, 
2005) and the "Extension of focPilot Pre-Appeal .Brief Conference Program" dated 1/10/2006, Appellant * 
submits apre-appeal brief request for review. The review is requested for the reasons set forth below: .*•*.*'. 

Appellant submits there exist clear errors in the Examiner's rejections and/or the Examiner's omissions 
of one or more essential elements needed for a prima facie rejection. Appellant submits the Examiner's 
"Response to Arguments" provides evidence that the Examiner has failed to consider the pending claims as 
required by the Manual of Patent Examining Procedure (MPEP) and prevailing case law. For anticipation under 
35 U.S.C. § 102, a reference must teach every aspect of the claimed invention cither explicitly or implicitly. 
Any feature not directly taught must be inherently present [emphasis added]. See MPEP § 706.02 - distinction , 
between 35 U.S.C. § 102 and § 103. Applicant submits MPEP § 2131 provides: H A claim is anticipated only if 
each and every element as set forth in the claim is found, either expressly or inherently described in a single 
prior art reference. Verdegaal Bros. v. Union Oil Co. oj California , 814 F .2d 628, 631, 2 USPQ2d 1051, 1053 
(Fed. Cir. 1 987). The identical invention must be shown in as complete detail as contained in the. . .cla i m.' 
Richardson y. Suzuki Motor Co., 868 F.2d 1226, 1236, 9 USPQ2d 1913, 1920 (Fed. Cir. 1989). The elements 
must be arranged as required by the claim. " MPEP § 2141 sets forth the Graham inquiries for a rejection under 
35 U.S.C. § 103. MPEP § 2 143 describes example of basic requirements of a prima facie case of obviousness 
under 35 U.S.C. § 103. As Applicant describes in detail below, Applicant submits there exist clear errors in the 
Examiner's rejections and/or the Examiner's omissions of one or more aspects of a prima facie rejection. 

- 1 - 
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The Examiner has rejected claims 1 -4 and 7-16 under 35 U.S.C § 102(b) as being anticipated by Hansen 
(United States Patent No. 5,838,907). Regarding claim 1, Applicant submits the cited portions of the cited 
reference fail to disclose the subject matter of claim I . As an example, Applicant submits the cited portions of . 
the cited reference fail to disclose "determining local interface and next neighbor information for the network 
device." The Examiner cites "(figure 7, items 1 14, 116, 120, 126, 122, 118, and 124)" of the Hansen reference 
as allegedly disclosing such feature. However, Applicant notes Figure 7 of the Hansen reference merely 
purports to be an illustration of a configuration manager GUI, but does not appear to disclose any method steps. 
As another example, Applicant submits the cited portions of the cited reference fail to disclose "determining 
whether the local interface and next neighbor information is associated with a logical configuration link stored 
among a plurality of logical configuration links in a logical link database." While the Examiner cites "(column 
5, lines 35-64; Subsystem is a logical link database)," Applicant notes the cited portion of the cited reference 
states, "The data and programming instruction are stored in the memory subsystem 6. . . Applicant sees no 
teaching as to "determining whether the local interface and next neighbor information is associated with a 
logical configuration link stored among a plurality of logical con figuration links in a logical link database." yAs 
yet another example, Applicant submits the cited portions of the cited reference fail to disclose "creating a new 
logical configuration link when the local interface and next neighbor information is not associated with any .of 
the logical configuration links in the logical link database." While the Examiner cites "(column 15, lines 30-50; 
Unconnected PCI slot are unassociated connection), Applicant notes col. 15, lines 33-39, state, "As may now be 
seen, the various network entities, as well as unconnected connection interfaces, are graphically displayed on the . 
backplane bitmap 220 using information contained in the bitmap section 36 of the configuration script 12-N. and 
the local configuration file 20 for the Compaq router 122." However, col. 5, lines 49-52, as the Examiner cited 
in alleging "Subsystem is a logical link database," states "If a particular network device does not have a 
configuration script, a configuration file cannot be constructed by the network device configuration tool 10." 
Accordingly, Applicant submits the Examiner's apparent interpretation of the teachings of the prior art would 
appear to render them inoperable. As yet another example, while the Examiner cites "(column 13, lines 10-30)," 
Applicant submits col. 13, lines 22-26, state, "If either the origination or destination device or entity dp not have 
an available slot which is connectable to the other device or entity, a determination is made at step 156 that the 
devices/entities cannot be connected." Applicant submits the cited portion of the cited reference fails to disclose 
"storing the new logical configuration link in the logical link database." As a further example, while the 
Examiner cites "(column 1 4, lines 41-60)," Applicant notes col. 14, lines 48-50, states ". . .before saving the 
constructed local configuration file 20 to the memory subsystem and associating it with the device." Applicant 
submits the cited portion of the cited reference does not appear to disclose "sending the new logical 
configuration link to the network device." 

Regarding claim 2, Applicant submits the cited portions of the cited reference fail to disclose "selecting 
a link type." While the Examiner cites "(column 1 3, lines 1-10; x.25, frame relay, PPP and HDLC are link 
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types," Applicant submits the Examiner has alleged, with respect to claim 1, from which claim 2 depends, that 

• "Subsystem is a logical link database." Applicant submits the Examiner doesn't provide any evidence that 
"Subsystem" includes any information pertaining to "frame relay, PPP and HDLC." Thus, Applicant submits 
the Examiner's apparent interpretation o f the teachings of the prior art would appear to render them inoperable. 
As another example, while the Examiner alleges "(column 1 1, lines 13-30; PC! slots are numbered configuration 
links)," Applicant submits such allegation does not disclose a step of "selecting a link numbering type. ..." As a 
further example, Applicant submits the cited portions of the cited reference fail to disclose "selecting a link 
application for the new logical configuration link." While the Examiner alleges "(column 14, lines 5-25; The 
script commands are applications; column 13, lines 65-column I4,iines 5)," Applicant notes the Examiner 
alleged with respecMo "creating a new logical configuration link. .."of claim 1,-from which claim 2 depends, • - 

: "Unconnected PCI slot are unassociated connection." While the Examiner alleges "The script commands are ' 
applications;" Applicant sees no allegation by the Examiner that "the script commands" are disclose link '■■ 
applications for "unconnected PCI slot," which the Examiner appears to allege disclose "the new logical . - 
configuration link." Thus, Applicant submits the Examiner's allegations appear to be inconsistent and would 
render the purported teachings of the cited reference inoperable. As yet another example, while the Examiner 
cites "(column 14, lines 15-25; Connection identifiers are configuration links)," Applicant notes the Examiner 
alleged, with respect to. "creating a new logical configuration link" of claim 1, from which claim 2 depends, 
"Unconnected PCI slot are unassociated connection." -Thus; Applicant submits "connection identifiers are . - 
configuration links" is inconsistent with the purported teachings alleged by the Examiner with respect to claim 

• 1, thereby apparently, rendering such teachings inoperable. Moreover, Applicant submits:"connection identifiers 
are configuration links" fails to disclose "selecting a sub layer interface type. . . .'" As yet another example, while 
the Examiner cites "(column 13, lines 10-30)," Applicant submits col. 13, lines 22-26, state, "If either the 
origination or destination device or entity do not have an available slot which is connectable to the other device 
or entity, a determination is made at step 156 that the devices/entities cannot be connected." Applicant submits 
the cited portion of the cited reference fails to disclose "creating a first endpoint for the new logical 
configuration link" and "creating a second endpoint for the new logical configuration link." 

Regarding claim 7, while the Examiner cites "(column 1 1, lines 41-53; Editing is modifying)," 
Applicant notes the Examiner alleged "Unconnected PCI are unassociated connection" as purportedly teaching 
"creating a new logical configuration link. . ." in claim I , from which claim 7 depends. Applicant sees no 
reference to such "unconnected PCI" in "(column 11, lines 4 1-53; Editing is modifying)," asallcged by the 



Regarding claim 8, while the Examiner cites "(column 10, lines I -20)," Applicant notes the Examiner 
alleged "Unconnected PCI are unassociated connection" as purportedly teaching "creating a new logical 
configuration link..." in claim 1, from which claim 8 depends. Applicant sees no reference to such 



Examiner. 
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"unconnected PC1 W in "(column 10, lines 1-20)," as alleged by the Examiner, Moreover, Applicant submits 
teachings in "(column 1 0, lines 1 -20)" appear to be inconsistent with "unconnected PCI." For example, "telnet 
to this device," "view ip addresses," and "view ipx addresses" appear tobe inconsistent with "unconnected PCI," 
as cited by the Examiner with respect to claim 1 , from which claim 8 depends. . 

Regarding claim 11, while the Examiner cites "(figure 7, items 1 14, 116, 120, 126, 122, 1 18, and 124), 
Applicant submits Figure 7 of the Hansen reference merely purports to be an illustration of a configuration 
manager GUI, but does not appear to disclose "wherein the processing system determines local interface and 
nextneighborinfonrntionforthenctworkdcvj.ee." 

Regarding claim 12, while the Examiner cites "(column 15,' lines 30-50; Unconnected PCI slot are * 
unassociated connection)," Applicant submits the "Unconnected PCI slot are unassociated connection" alleged 
by the Examiner tails "to disclosevfor example, "next neighbor information" and "the logical link database." 
Thiis, Applicant submits the Examiner has not made a prima facie showing of anticipation with respect to the " v 
subject matter of claim" 12. * 

: Regarding claim. 13, while the Examiner cites "(column 13, lines 1Q-3Q)/' Applicant submits col. 1 3,'> 
-lines 22-26, state, "If either the origination or destination .device or entity do not have an available slot which is 
connectable to the other device or entity, a determination is made at.step 1 56 that the devices/entities cannot be • 
. connected." Applicant submits the cited portion of the cited reference. fails to disclose ''wherein the processing . 
system creates a new logical .con figuration Jink when the local interface and next neighbor information is not 
associated with any of the logical configuration links stored in the logical link database." 

: Regarding claim 14, while the Examiner cites "(column 13, lines 10-30)," Applicant submits col. 13, 
lines 22-26, state, "If either the origination or destination device or entity do not have an available slot which is 
connectable to the other device or entity, a determination is made at step 156 that the devices/entities cannot be 
connected" Applicant submits the cited portion of the cited reference fails to disclose "wherein the processing 
system causes the new logical configuration link to be stored in the logical link database." 

Regarding claim 16, while the Examiner cites "(column 14, lines 41-60)," Applicant notes col. 14, lines 
48-50, states ".. .before saving the constructed local configuration file 20 to the memory subsystem and 
associating it with the device." Applicant submits the cited portion of the cited reference does not appear to 
disclose "wherein the processing system causes the new logical configuration link to be sent to the network 
device." 

Regarding claim 18, Applicant notes the Examiner states "As per claim 1 8, it is rejected under the same 
rationale as claim 2." Applicant submits the Examiner has not alleged anticipation or cited alleged teaching 
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with respect to subject matter recited in claim 1 8, which Applicant notes is different than claim 2. Thus, 
Applicant submits the Examiner has not made a prima facie showing of anticipation with respect to claim 18. . 

The Examiner has rejected claim 5 under 35 U.S.C. § 103(a) as allegedly being unpatentable over 
Hansen in view of Hansen (United States Patent No. 5 ,838,907), and further in view of Hardwick (United States 
Patent No. 5,550,8 16). Applicant notes the Examiner alleges, with respect to claim 2, from which claim 5 
depends, "The script commands are applications." However, the Examiner now alleges "Hardwick teaches the 
step of selecting a link application from a group consisting of: Internet Protocol Forwarding, Multi-Protocol 
Label Switching and Internet Protocol Forwarding, and Multi-Protocol Label Switching (column 43, lines 60- 
column 44, lines 5)." Applicant submits the Examiner's allegations as to purported teachings of the cited 
references. with respect to the subject matter of claims 2 and 5 are inconsistent and contradictory, thereby • 
rendering the supposed combination of the purported teachings inoperable. Moreover, Applicant submits the 
Examiner's alleged motivation to combine the references does not appear to pertain to the supposed combination 
of the purported teachings. Thus, Applicant submits the Examiner has not made a prima facie showing of 
obviousness with respect to the subject matter of claim 5. 

The Examiner has rejected claim 6 under 35 U.S.C. § 103(a) as allegedly being unpatentable over " 
Hansen in view of Hansen (United States Patent No. 5,838,907) in view of Chui (United'States Patent No: 
2002/0165978). Applicantnotes the Examiner alleges, with respect to claim 2, from which claim 6' depends, 
"Connection identifiers' are configuration links." : However, ihe Examiner now alleges "Chui teaches selecting aT: 
sub layer interface type comprises the step of: Selecting the sub-layer interface type from a group consisting of:* 
Packet over Sonet, Asynchronous Transfer Mode, and GigEthemet." Applicant submits the Examiner's 
allegations as to purported teachings of the cited references with respect to the subject matter of claims 2 and 6 
are inconsistent and contradictory, thereby rendering ihe supposed combination of the purported teachings 
inoperable. Moreover,; Applicant submits the Examiner's alleged motivation to combine the references does not 
appear to pertain to the supposed combination of the purported teachings. Thus, Applicant submits the 
Examiner has not made a prima facie showing of obviousness with respect to the subject matter of claim 6. 

Respectfully submitted, 




Date 




Ross D. Snyder, Reg. No. 37,730 
Attorney for Applicants) 
Ross D. Snyder & Associates, Inc. 
PO Box 164075 
Austin, Texas 78716-4075 
(512) 347-9223 (phone) 
(512) 347-9224 (fax) 
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Simon Ke 
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■Dpcurrient Code - AP.PRE DEC 



Notice of Panel Decision from 




re-Appeal Brief Review 



This is in response to the Pre-Appeal Brief Request for Review filed Sept. 24. 2009 , 

1. □ Improper Request - The Request is improper and a conference will not be held for the following 
reason(s): 

□ The Notice of Appeal has not been filed concurrent with the Pre-Appeal Brief Request. 

□ The request does not include reasons why a review is appropriate. 

□ A proposed amendment is included with the Pre-Appeal Brief request. 

□ Other: 

The time period for filing a response continues to run from the receipt date of the Notice of Appeal or from 
the mail date of the last Office communication, if no Notice of Appeal has been received. 



2. 13 Proceed to Board of Patent Appeals and Interferences - A Pre-Appeal Brief conference has been 
held. The application remains under appeal because there is at least one actual issue for appeal. Applicant 
is required to submit an appeal brief in accordance with 37 CFR 41.37. The time period for filing an appeal 
brief will be reset to be one month from mailing this decision, or the balance of the two-month time period 
running from the receipt of the notice of appeal, whichever is greater. Further, the time period for filing of the 
appeal brief is extendible under 37 CFR 1.136 based upon the mail date of this decision or the receipt date 
of the notice of appeal, as applicable. 

El The panel has determined the status of the daim(s) is as follows: 

Glaim(s) allowed: . 

Claim(s) objected to: . 

Claim(s) rejected: M8 . 

Cfaim(s) withdrawn from consideration: . 



3« Q Allowable application - A conference has been held, the rejection is withdrawn and a Notice of 
Allowance will be mailed. Prosecution on the merits remains closed. No further action is required by 
applicant at this time. 

4. □ Reopen Prosecution - A conference has been held. The rejection is withdrawn and a new Office 
action will be mailed. No further action is required by applicant at this time. 



All participants: 
(j)- Simon Ke . 
(2) Dennis Chow. 



(Z VEddie C. LeeA 
(4) . 



U.S. Patent and Trademark Office 
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Attoi.-oy Docket No.: 1400.1374890 

PATENT APPLICATION 
ASSIGNMENT OF U.S. PATENT APPLICATION 



This is an assignment of patent rights between the inventor(s) 



Denis Proulx 


Chuong Ngoc Ngo 


Attaullah Zabihi 


David Wing-Chung Chan 


Felix Katz 



(herein after referred to as the Inventor) and ALCATEL CANADA INC. having a place of 
business at 600 March Road, Kanata, Ontario, Canada K2K 2E6 (herein after referred to as the 
Assignee). 



WHEREAS, Inventor has caused to be prepared on December 19, 2001, a United States Patent 
Application Number 10/027,821 in the Inventor's name entitled 

METHOD AND SYSTEM FOR IP LINK MANAGEMENT 

having a docket number of 1400.1374890 (herein after referred to as the Patented Invention); and 

WHEREAS, Assignee has a desire to acquire all rights, title, and interest in the Patented 
Invention. 

NOW, THEREFORE, the parties agree as follows: 

1. The Inventor hereby sells, assigns, and transfers its entire rights, title, and interest in the 
Patented Invention and all patents that may be granted therefrom due to divisions, reissue, 
substitutions, extensions, continuations, and continuations-in-part to the Assignee. 

2. The Inventor hereby sells, assigns, and transfers its entire rights, title, and interest in any 
foreign (non U.S.) national patent application, invention registration, or equivalent (Foreign 
Applications), claiming approximately the same subject matter of the Patented Invention to the 
Assignee. 

3. In consideration for the sum of one dollar ($1) U.S. (or its equivalent) and other 
consideration for which both parties acknowledge to be valuable, having been conveyed to the 
Inventor by the Assignee for the sale, assignment, and transfer of the Patented Invention and 
Foreign Applications. Consideration may include at least one of: employment, an independent 
contractor agreement, monetary payment, or other benefit hereby acknowledged as received. 

4. Inventor hereby authorizes and requests the Commissioner of Patents and Trademarks to 
issue the patent for the Patented Invention, and all resulting patents therefrom, insofar as 
Inventor's interest is concerned, to the Assignee. 
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5. The Inventor further agrees to execute any and all powers of attorney, applications, 
assignments, declarations, affidavits, and any other papers in connection therewith necessary to 
perfect such rights, title, and interest in the Assignee. 

6. The Inventor hereby further agrees to communicate with the Assignee any facts its knows 
regarding any improvements of the Patented Invention while employed by Assignee and for one 
year thereafter. 

7. The Inventor hereby yet further agrees to, at the expense of the Assignee: 

i) testify in any legal proceedings, 

ii) sign all lawful papers, 

iii) execute all divisional, continuation, continuation-in-part, reissue and substitute 
applications, 

iv) make all lawful oaths, and assist in vesting title in the Assignee and to aid the 
Assignee to obtain and enforce proper protection for the subject matter of the 
Patented Invention in all countries, and 

v) notify Assignee promptly (by facsimile or first class mail) of any subpoena or 
contact by any person other than Assignee or its agents regarding the Application 
or resultant patent(s) issuing therefrom, and in any event at least one week prior to 
any deposition, legal inquiry or legal proceeding relating to the above identified 
invention. 



This assignment is executed on the date(s) of which the Inventor has signed. 


Inventor: 


y i / Jl 7 / 'B oo £ 


Denis Froulx 


Date: / / 


Chuong^/goc N^<J 


V Date: 


Attaullafi~z£frhi 


Date: 


David Wing-Chung Chan 


Date: 

2g Feb Tc9o> 



Felix Katz Date: 



2 



Atto..,ey Docket No.: 1400.1374890 



STATEMENT OF WITNESS 



I, kt^yrra At , whose full post office address is 

, state that I was personally present and did see 
Denis Proulx, who is personally known to me to be the person named in the above assignment, 
duly sign and execute the same on the date set forth above. 




ature of Witness) 



STATEMENT OF WITNESS 

I> //AX//ies 0^ouyP4~ , whose full post office address is 

a? Q^ee/ Ae. ArnpnZr (QyJ /C7S ?£g , state that I was personally present and did see 
Chuong Ngoc Ngo, who is personally known to me to be the person named in the above 
assignment, duly sign and execute the same on the date set forth above. 





ature of Witness) 



STATEMENT OF WITNESS 



I> /^^d/ ^a*Sc/ r of/ , whose full post office address is 

/jr/ifs/os $J- A'/fS/r-fi , state that I was personally present and did see 
Attaullah Zabihi, who is personally known to me to be the person named in the above 
assignment, duly sign and execute the same on the date set forth above. 




(Signature of Witness) 



STATEMENT OF WITNESS 

\ ^^crn-fiJ , whose full post office address is 

y ScJ&y Ay} ^/,or (ChJ- » state that I was personally present and did see 

David Wing-Chung Chan, who is personally known to me to be the person named in the above 
assignment, duly sign and execute the same on the date set forth above. 




y (Sfi gnature of Witness) 
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STATEMENT OF WITNESS 

U //^X/w<^ / %^ ofo & > whose full post office address is 

7- Scj&JL '7HZii/f?.ftf/iprnss- QJj K7S¥r% , state that I was personally present and did see 
Felix Katz, who is personally known to me to be the person named in the above assignment, 
duly sign and execute the same on the date set forth above. 




(Signature of Witness) 



Industry Canada 



Industrie Canada 



Corporations Canada 

9th floor 

Jean Edmonds Towers South 
365 Laurier Avenue West 
Ottawa, Ontario K1A 0C8 

December 22, 2006 / le 22 dfeembre 2006 



Corporations Canada 

9e6tage 

Tour Jean Edmonds sud 
365, avenue Laurier ouest 
Ottawa (Ontario) Kl A 0C8 



Your file - Votre r6f6rence 



KIM COE-TURNER 

ALCATEL NETWORKS CORPORATION 
600 MARCH 
KANATA ONTARIO 
K2K 2E6 



Our file - Notre r6f6rence "7. 
439516-6 



Re - Objet 

Alcatel-Lucent Canada Inc. 



Enclosed herewith is the document issued in the above 
matter. 



Vous trouverez ci-inclus le document £mis dans 
l'affaire prdcitde. 



A notice of issuance of CBCA documents will be 
published in the Canada Corporations Bulletin . A 
notice of issuance of CCA documents will be 
published in the Canada Corporations Bulletin and the 
Canada Gazette, 



Un avis de Emission de documents en vertu de la . 
LCSA sera publi6 dans le Bulletin des sociiUs 
canadiennes . Un avis de remission de documents en 
vertu de la LCC sera public dans le Bulletin des 
sociitis canadiennes et dans la Gazette du Canada > 



IF A NAME OR CHANGE OF NAME IS 
INVOLVED, THE FOLLOWING CAUTION 
SHOULD BE OBSERVED: 



SX EST QUESTION D'UNE DENOMINATION 
SOCIALE OU DUN CHANGEMENT DE 
DENOMINATION SOCIALE, L'AVERTISSEMENT ; 
SUTVANT DOIT £TRE RESPECTS : 



This name is available for use as a corporate name subject to and 
conditional upon the applicants assuming full responsibility for any 
risk of confusion win existing business names and trade marks 
(including those set out in the relevant NUANS search report(s )). 
Acceptance of such responsibility will comprise an obligation to 
change the name to a dissimilar one in the event that representations 
are made and established that confusion is likely to occur. The use 
of any name granted is subject to the laws of the jurisdiction where 
the company carries on business. 



For the Director General, Corporations Cana< 



CanadS 




Cette denomination sociale est disponible en autant que les 
requerants assument toute responsabilite* de risque de confusion 
avec toutes denominations commerciales et toutes marques de 
commerce existantes (y compris ceUes qui sont citees dans Ic(s) 
rapport(s) de recherches de NUANS pertinents)). Cette acceptation 
de responsabilite* comprend l'obligation de changer la denomination 
de la socieHe* en unc denomination differcnte advenant le cas ou des 
representations sont faites e*tablissant qu'il y a une probability de 
L'utilisation de tout nom octroye* est sujette & toute loi 
diction ou la socidte* exploite son entreprise. 



tur le Directeur g6n6ral. Corporations Canada 
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Industrie Canada 



Certificate 

of Amalgamation 

Canada Business 
Corporations Act 



Certificat "' 
de fusion 

Loi canadienne sur 
les soci£ t€s par actions 



Alcatel-Lucent Canada Inc. 



439516-6 



Name of corporation-Denomination dc la soci6t6 



I hereby certify that the above-named 
cdiporation resulted frorti an amalgamation, : 
under section i 85 of the Canada Business 
Corporation Act, of thexorporations set outin 
the attached articles of amalgamation. 



Corporation nurnber-Numfro de la soci6td 



Je certifie que la sdci6t6 ; susmentibhn6e est 
issues d'une fusion; en vertu de I'article 185 de . 
la Loi canadienne sur les socittts par actions, 
des soctetes donates ^nominations 
apparaissent dans les statuts de fusion 
ci-joints. : : 




Richard G. Shaw 
Director - Directeur 



January 1, 2007 / le 1 Janvier 2007 
Date of Amalgamation - Date de fusion 



Canada 1 



■♦I Industry Canada rndustrta Canada 

Canada BuimsM LoJ canadtonna sot jsa 
Corpomtkma Act aocJatas par octtena 



FORM 9 
ARTICLES OF 

(SECTION 1 



FORMULAIRE 9 
STATUTS DE FUSION 
|ARmCU185) 



1 -Nama of th» Arnaioarntttd Corporation ~ 
Alcatel -Lucent Canada Inc. 



DenornE 55 on 555S 3a It aodat6 Sua da ta fuaion 
oTficTS U provlnet ou S tanrnojra au Canada oO at situara 5 stye 



2 - The provinca or territory in Cwiada where the 
lobsettuatsd 

Ontario 



*3 - The desse* and any maximum number of shares that thi 
corporation it authorised to Issue 



CatiperiM at tout nombra maxima! fictions qua li i 
aemettre 



See Annexed "Schedule . A* which is incorporated in this Conn 



4 - Restrictions, If toy, on share transfers 

None 

5 ~ Numbar tor mint mum and maximum number) of directors 



Restrictions aur la trsnsfert dts actions, a'B y a lieu 



Nombra (ou nombre mWmal at maxim*) d'edrnWstrateurs 

Minimun 1 - Maximum 15 

8 - Ruction,, If any, on bustnes. the corporation may carry on , Umttes trnposees I ractfvM commsrriiie da 5 soctets, s'H y a i 



None 



7 -Other proviso. If any ~ Autra. dlepoaWons, si y a Ha 

See Annexed Schedule "B" which is incorporated in thin form 



. — f — r u tn tK»* .action or U fusion a iti apprbuvee an accord avac lartWe ou la paragraphs da la 

.0183- . , 

Q iwii : 

» ri iB4i» 





Corporation No. 
rf dalaaocttt* 


Signature j 


Dat* 


Tltra 


Tal. No. 
N*dat6l. 


Alcatel Canada Inc. 


42U84-7 






Director 


<13 794-6310 


Lucent Technologies Canada 












Corp. /Technologies Lucent 


667402-C 










Canada Corp. 


* 






Director 


905-943-5000 
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IC 3100 1*004/121 



R 19 WC "061*06 



Canada 1 



42r? 



Canada Business Corporations Act 



Loi canadlenna sur las sodetes per actions 



Articles of Amalgamation 
FORM 9 
INSTRUCTIONS 



If you require more information In order to complete Form 8, you 
may with to consult the Name G renting Compendium or the Nsme 
Granting Guidelines end the Ainaigametion Kit 



You mutt ffla Form 9 by sending or 
documents to the address provided below, 



sending or -faxing the. completed 



By mcil or fax: $200 



Set out the proposed name for the amalgamsted corporation that 
compiles with sections 10 and 12 of the Act if this nemo is not 
the same ss one of the amalgamating corporations, articles of 
smalgemetion must bs accompanied by a Canada-Wased NUANS 
sesrch report dated not more than ninety (90) days prior to the 
receipt of the articles by the Director. On request a number name 
may be assigned under subsection 1112) of the Act without a 
sesrch. 



Item 2 

Set out the name of the province or territory within Canada where 
the registered office is to be situated. 

Item 3 

Set out the details required by paragraph 6(1 HO of the Act, 
including details of the rights, privileges, restrictions end conditions 
attached to each class or series of shares. All shares must be 
without nominal or par value and must comply with the provisions 
of Pan V of the Act 

Item 4 

If restrictions are to be pieced on the right to transfer shares of the 
corporation, set out a statement to this effect end the nature of 
such restrictions. 

Setout the number of directors. If cumulative voting Is permitted, 
the number of directors must be invariable; omerwise it is 
permissible to specify a minimum and maxfmum number of 
directors. 

Item 8 

If restrictions are to be pieced on the business the corporation may 
carry on, set out the restriction!. 

Setout any provisions, permitted by the Act or Regulations to be 
set out in the by-laws of the corporation, that are to form part of 
the articlei, including any pre-emptive rights or cumulative voting 



under section 183 or 



hern 8 

Indicate whether the amalgamation is 
subsection 1 84(1 ) or (2) of the Act 

Other Notices end Documents ma _^ 

(1) The Articles must be sccompanfed by Form 2 tofomstfon 
B^oMrclng th* R^gittarwd OfTfce *nd tAe BomrJ of Dinctori' and a 
statutory declaration of a director or authorized officer of each 
amalgamating corporation In accordance with subsection 185(2) of 
the Act n _ H 

(2) All amalgamating corporations should ensure that all fifing 
requirements contained m the Act have been met 

Tfte cotttpi&tmS document end fees payaois fo tae flseerVer Genera/ 
for Canada are to be serif to: 

The Director, Canada Business Corporations Act 
Jean Edmonds Tower, South 
9th Floor 

365 Laurler Ave. West 
Ottawa. Ontario 
K1A0C8 

or by facsimile of (813) 041-0999 
Inquiries: 1-868-333-6566 
IC3190 (2004/121 p.2 



Statute do fusion 
FORMULAIRE 9 
INSTRUCTIONS 

QenereOtea 

81 vous desirez obtenir de plus am pies Inform atwrw ofin do completer .« 
le torrnutaJre 9, veuilez consufter I'Enonce d'ootrol . des 
denominations ou bs tlgnes directrices pour f octroi des 
& nominations eirtsl qua le Recuefl d'inf ormetion sur tei fusions. 

Vous devex deposer le formutaJre 9 en envoy ant ou en tSttcoplant fa 
document compute a P edresse indiquee eu bas de certe page. 

Droits payables 

Par la poste ou tflecopleur : 200 $ 
Rubrlque 1 

Indlquer la denomination sociale de la societs Issue de la fusion. . 
iaquelie doh satisfalre aux exigences des articles 10 et 12 de le Lol. - 
$1 cette denomination differs de celle de Tune des societes , 
hjsiwwrtss, las statuts de fusion dotvent 6tre sccompsgnes d'un,.. 
rapport de recherche NUANS couvrent ie Canada, dont la,dete 
remonte a qustre-vlngt-dix (90) {ours ou moins avant la date de , 
reception des statuts par le dlrecteur. SI un numera matnculo est 
demand* en guise de denomination sociale, U peut etre assign*, sans ' 
recherche prealeble, en vertu du paragraphs 1 1 (2) de le Loi. 

Rubrlque 2 

Indlquer le nom de la province ou du territoire eu Canada ou le siege 
social se srtuera, 

Rubrlque 3 . . 

Indlquer lea details mauls par I'aHnea 6(1)0 de ia Loi f y cbmpris.les 
details des droits* privileges, restrictions et conditions assorts a 
cheque categoric ou eSrie d'ections. Toutes tea actions dofvent etre 
sans vaieur nommale ou sans valour eu pair et doivent etre 
conformes aux dispositions de la partie V de la Loi. 

Rubrlque 4 

SI le droit de tramfert des actions de la sodttfi doit Biro restraint, 
inc hji > u ne declaretion a cat effet et indlquer le nature da ces 
restrictions* 

Rubrlque 5 - 

Indlquer le nombre d'administretBurs. SI un vote cumuletif est pr6vu, 
ce nombre doit aire fixe; eutrernent, il est permis de specifier un 
nombre minimal et maximal d'adrnintatrateurs. 



Rubrlque 6 

Si dea Bmtes doivent etre imposees a ractivlte commercisle de la 
societe, les Indlquer. 

Rubrlque 7 

Indlquer les dispositions que la Loi ou le reglement permet d'enoncer 
dene les reglements edmWstrstifs de Is soclete et qui dofvent fairs 
partie des statuts, y comprfs les disrjos'rtions relatives au vote 
cutnulatif ou wx droits de preemption. 

Rubrlque 8 

Indlquer si la fusion est faite en vertu de Terticle 1B3 ou du 
paragraphs 1 84(1 ) ou (2) de la Lol. 

Autres avis et documents 

(1) Les status dorvent etre eccompagnes du formuUIre 2 
7nftw»stfeii cwweme^ 

at d'una dectsrstlon soienneOa d'un edmlnlstrateur ou d'un dlrlgeant 
autorise de cheque aocieta fuslonnante conform6ment au paragraphs 
185(2) de la LoL 

(2) Les societes fuslormsntss doivent e'assurer que toutes les 
exigenoea de depot contenues dans la Lol ont dta remplies. 

L» document compMt* et Ass drafts peyaAfes au ffeceveur carters/ du 
Canada dc/vmrt Un errwyes mi : 

Dtrecteur, to) cenedlenne sur les societes par actions 

Tour Jean Edmonds, sud 

aiema 6tsge 

365, ev. Laurler ouest 

Ottawa (Ontario) 

K1A0C8 

ou per tsleeopleur : 1613) 941-0989 
Rensetgnements : V88B-333-5556 



SCHEDULED" 



3. The classes and any maximum number of shares that the corporation is 
authorized to issue: 

common shares ;r . . 

(a) an unlimited number of Common Shares without nominal or par value 
(the "Common Shares"), the holders of which are entitled: 

, : . t0 °h?, ?ot£ per share at aB of shareholders, except 

- :.- v- meetings at which only holders of a specified class of shares are 
entitled to vote; ^ :V"'\; f ::\Cl:.:"' t :. x * 

(ii) subject to the rights, privileges, restrictions and conditions 
attaching to any other class or iserieS of shares of the 
Corporation, to receive any dividends declared and payable by 
the Corporation on the Common Shares; 

(iii) subject to the rights, privtteges, restrictions and conditions 
attaching to any other class or series of shares of the4 

: : Corporation^^ of the 

Corporation upon a liquidation, dissolution or winding-up of 
,: v .,v , the Corporation; .«.,.,>,... 

and the holder of a fractional Common Share is entitled to exercise 
voting rights and to receive dividends in respect thereof . 
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SCHEDULED 

Without iri any wiy limiting the borrowing powers of the directors 
urider^ Act, as amended from time 

to time, die Board of Directors may from time to time, in such amounts 
and on such terms as it deems expedient 

(i) borrow moniey on the credit of the Corporation; 

^U) " Uniit or iricrease the amount to be borrowed; 

; (iii) ; ; 

(iv) pled^ such sums 
Vt and at such prices as rxiaybe deemed expedient; 

(v) secure any such debentures; or other securities/ or any other 
J * present or future borrowing or liability of the Corporation, by 

; mortgage, hypothec, ^ criar^ or pledge of all or any currently 
owned or siirkequehtiy acquired real and personal, moveable 
and immoveable/ property of the Corporation, and the 
! Z undertaking and .rights of the Corporation. , 

Nothing in this p^agraph limits of restricts the borrowing of money 
by the Corporation on bills of exdiahge or promissory notes made, 
draWn, accepted or endorsed by or on behalf of the Corporation. 

The Board of Dix^^rs may from time to time delegate to such one or 
more of the directors and officers of the Corporation or persons as may 
be designated by the Board all or any of the powers conferred on the 
Board above to such extent and in such manner as the Board shall 
determine at the time of such delegation. 

For greater certainty the foregoing powers conferred on the directors 
shall be deemed to include the powers conferred on a company by 
Division VII of the Special Corporate Powers Act, being Chapter P-16 
of the Revised Statutes of Quebec, 1977 and every statutory provision 
that may be substituted theref or or for any provision therein. 

The directors may from time to time appoint one or more directors in 
accordance with the laws governing the Corporation. 
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Application No: 10/027,821 



OTHER EVIDENCE FILED AFTER THE NOTICE OF APPEAL 



RELATED CASES SECTION 



As stated above, as presently advised, there are no other prior or pending appeals, 
interferences, or judicial proceedings known to Appellant, the Appellant's legal representative, or 
Assignee which may be related to, directly affect, or be directly affected by, or have a bearing on 
the Board's decision in the pending appeal. Thus, no copies of decisions rendered by a court or 
by the Board are provided. 



Respectfully submitted, 
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Date 



Ross D. Snyder, Reg. No. 37,730 

Attorney for Appellant(s) 

Ross D. Snyder & Associates, Inc. 

POBox 164075 

Austin, Texas 78716-4075 

(512) 347-9223 (phone) 

(512) 347-9224 (fax) 



